The flaw in HCL Aftermarket DPC allows attackers to learn the internal IP addresses used within an organisation, effectively mapping the network. This exposure compromises confidentiality by revealing sensitive infrastructure details that can be leveraged for further attacks. The weakness is classified as CWE‑200 (Information Exposure).

The vulnerability affects HCL Aftermarket DPC version 1.0.0. Systems running this product should verify that they are running the affected version and assess any risk of exposure.

The CVSS score of 3.1 indicates a low‑to‑moderate severity. EPSS data is not available, so the probability of exploitation is uncertain, and the flaw is not listed in the CISA KEV catalog. Likely exploitation would occur via exposed web or application interfaces that allow an attacker to retrieve internal IP addresses. The exact attack vector is not specified in the advisory, so the information is inferred from the nature of the disclosure.