The vulnerability occurs because Advantech Hospital Queuing Management does not enforce authentication on a specific API documentation endpoint. An attacker who can reach this URL from outside the network can retrieve the API documentation, which exposes internal services, endpoint names, and possible parameters. This data can be leveraged by an attacker to craft additional attacks, such as crafting API calls that exploit other weaknesses, or to map the system architecture for subsequent exploitation attempts. The weakness is typified by CWE‑306 (Missing Authentication).

Advent​e​ch Hospital Queuing Management is affected in any release prior to ISO version 1.2.13 or where the QueueHttp.dll component is earlier than 1.2.12.7. These older builds expose the undocumented API documentation endpoint to unauthenticated users.

The CVSS score of 9.3 indicates a high severity impact and the vulnerability can be triggered by a remote attacker with no authentication. The EPSS score is not provided, and the issue is not listed in the CISA Known Exploited Vulnerabilities catalog, which implies no confirmed real‑world exploitation yet. However, the attack is straightforward: a simple HTTP request to the documented URL from an external host. Consequently, the risk is significant if the server is exposed to the internet or an untrusted network segment. Organizations should treat this as a high‑risk flaw that can ease the planning of further attacks if unpatched.