This vulnerability affects Dotouch XproUPF 2.0.0-release-088aa7c4 and involves improper access controls within an unknown function of the UPF component. The CVSS 4.0 base score is 2.1, reflecting low severity with attack vector requiring adjacent network access, high attack complexity, and low impact on confidentiality, integrity, and availability. The vendor was contacted early, but no official fix or remediation level has been published. Exploitation is difficult and no exploits are known in the wild.

The impact is limited due to the low CVSS score of 2.1, indicating minimal confidentiality, integrity, and availability impact. The attack complexity is high, and no known exploits exist, reducing the immediate risk. Improper access controls could potentially allow unauthorized actions if exploited, but the difficulty and low impact reduce the threat level.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation is documented, monitoring vendor communications for updates is recommended. No specific mitigation actions can be advised beyond awaiting vendor guidance.