This vulnerability involves improper handling of XML input in the level-rule module of Distribution Management v1.0.0, enabling an attacker to exploit XXE to access sensitive files, perform internal network reconnaissance, or conduct attacks against the server. The vulnerability is present due to the processing of maliciously crafted XML payloads. No CVSS score or detailed vendor advisory is available, and no fix status is confirmed.

Successful exploitation can result in unauthorized disclosure of sensitive information, internal network scanning, and potential server attacks. These impacts can compromise confidentiality and potentially availability of the affected system. No evidence of active exploitation has been reported.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, avoid processing untrusted XML input or apply XML parsing configurations that disable external entity resolution if possible.