This vulnerability affects AV Stumpfl Pixera Two Media Server up to version 25.1 R2 and involves a path traversal flaw in a component listening on service port 1338. The flaw allows attackers to manipulate file paths, which can lead to unauthorized file access. The vulnerability has a CVSS 4.0 base score of 5.3, indicating medium severity, with attack vector being adjacent network and no privileges or user interaction required. A public exploit is known, increasing the risk of exploitation. The vendor has addressed the issue in version 25.2 R3, and upgrading to this version mitigates the vulnerability.

Successful exploitation of this path traversal vulnerability can allow an attacker to access files outside the intended directory structure on the affected media server. This could lead to unauthorized disclosure of sensitive information. The CVSS score of 5.3 reflects a medium severity impact with low complexity and no required privileges or user interaction.

Upgrade AV Stumpfl Pixera Two Media Server to version 25.2 R3, which fixes this path traversal vulnerability. This is the recommended and sufficient remediation. No other mitigation steps are indicated or necessary according to the available data.