This vulnerability involves relative path traversal in Contec FXA5000 series and related FX4000 and FX3000 series devices. Exploitation requires FTP access and allows an attacker to read or alter arbitrary files on the affected device's server. The CVSS v3.1 base score is 8.1, indicating high impact on confidentiality and integrity, with no impact on availability. The affected versions include all versions prior to 1.12.00 for FXA5000, prior to 1.14.00 for FX4000, and prior to 1.20.00 for FX3000 series devices. There is no information on available patches or vendor advisories.

Successful exploitation can lead to unauthorized disclosure and modification of files on the device, compromising confidentiality and integrity. This could allow attackers to manipulate device behavior or extract sensitive information. Availability is not impacted according to the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict FTP access to trusted users only and monitor for unauthorized access attempts.