The vulnerability in IEI Integration Corp's iVEC-IEI Virtualization Edge Computer allows an authenticated remote attacker to request deletion of arbitrary system files or directories. This flaw can result in permanent data loss, corruption of critical files, and interruption of system services, thereby directly affecting the integrity and availability of the affected environment.

Affected systems include the iVEC TANK-XM811 product line from IEI Integration Corp. No specific firmware or hardware revision numbers are listed in the advisory, so every installed instance of the iVEC TANK-XM811 is potentially vulnerable unless a later security fix has been applied.

The CVSS score of 7.2 indicates a high severity, while the EPSS score is not available and the vulnerability is not listed in the CISA KEV catalog, meaning the public exploitation likelihood is currently uncertain. The attack requires prior authenticated remote access, so the risk is limited to environments that expose remote management interfaces. In the absence of a patch, mitigations such as enforcing strict role-based access control on delete operations, disabling the file‑deletion feature, and monitoring for unexpected deletions can reduce risk.