The vulnerability is an out‑of‑bounds read that allows remote attackers to read sensitive data from memory in Delta ISPSoft. The flaw bypasses bounds checking between user input and internal buffers, exposing internal state or configuration data. This can lead to disclosure of passwords, configuration files, or other confidential information, violating confidentiality.

Affected installations are running an unpatched version of Delta ISPSoft from Deltaww. Versions older than 3.25 are impacted. All deployments of the ISPSoft application are affected if they use the vulnerable code path.

Based on the description, it is inferred that remote attackers may trigger the out‑of‑bounds read by sending a crafted request over the network. The CVSS score of 7 indicates a high severity. The EPSS score is not available, and the vulnerability is not listed in CISA's KEV catalog, suggesting no proven exploits yet. Because the flaw is remote and does not require local privileges, exploitation is likely achievable on exposed systems. The impact is the disclosure of sensitive data, which can lead to credential theft or further compromise.