4MOSAn Management Center contains a Relative Path Traversal vulnerability (CWE-23) that enables unauthenticated remote attackers to perform arbitrary file reads on the system. This flaw allows attackers to manipulate file paths to access files outside the intended directory, potentially exposing sensitive system files. The vulnerability has a CVSS 3.1 base score of 7.5, indicating high severity with network attack vector, low attack complexity, no privileges required, no user interaction, and high confidentiality impact but no integrity or availability impact. There is no vendor advisory or patch available at this time, and no known exploits in the wild have been reported.

An attacker can remotely and without authentication read arbitrary files on the affected system, potentially exposing sensitive or confidential information. The confidentiality impact is high, but integrity and availability are not affected. This could lead to information disclosure that may facilitate further attacks or data leakage.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict network access to the affected system and monitor for suspicious activity related to file access attempts. Avoid exposing the management center to untrusted networks.