This vulnerability involves an open redirect in the Management Service component of ST Engineering iDirect Evolution and Velocity WebServer Evolution products up to version 20260717. By manipulating the Host argument in the /login.html file, an attacker can redirect users to arbitrary external URLs. The vulnerability is remotely exploitable without privileges or user interaction, though user interaction is required to trigger the redirect. The vendor was notified but did not provide a response or patch. Public exploit code is available.

An attacker can exploit this vulnerability to redirect users to malicious websites, potentially facilitating phishing attacks or other social engineering exploits. However, the vulnerability does not allow direct code execution or data compromise on the affected system itself. The medium CVSS score reflects the moderate risk posed by open redirect issues.

No official patch or remediation has been provided by the vendor as of the disclosure date. Users should monitor the vendor's communications for any updates. Until a fix is available, administrators should consider implementing web application firewall (WAF) rules to detect and block suspicious redirect attempts involving the Host parameter. Additionally, user awareness about phishing risks related to redirects is advisable.