The iVEC‑IEI Virtualization Edge Computer has a path traversal weakness (CWE‑22) that lets an authenticated remote attacker create directories in unintended system paths. This can alter the server file structure, potentially enable further compromise, and compromise the integrity of the system.

IEI Integration Corp: iVEC TANK‑XM811 virtualization edge computer.

The vulnerability has a CVSS score of 5.3, indicating moderate severity. EPSS information is not available and the issue is not listed in the CISA KEV catalog. The attack requires valid authentication, suggesting that the risk is primarily to users who have legitimate remote administrative access. Exploits would first create directories in protected areas, which could be leveraged to install additional malicious components or facilitate privilege escalation.