This vulnerability in ATEN Unizon 2.7.262.002 arises from improper validation of user-supplied paths in the updateLicense method, enabling authenticated attackers to perform arbitrary file deletion via path traversal. The flaw allows manipulation of file operations outside the intended directory, potentially causing denial-of-service by deleting critical files. No official patch or remediation level has been provided as of the published date.

An authenticated attacker can delete arbitrary files on the affected system, which may result in denial-of-service conditions. The confidentiality is not impacted, but integrity is compromised due to unauthorized file deletion. Availability is also affected due to potential service disruption.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict access to the updateLicense functionality to trusted users only and monitor for suspicious activity involving file deletions. Avoid exposing the management interface to untrusted networks.