An attacker who can reach the web interface of the FDS 102 device can upload a specially crafted ZIP archive that contains directory traversal sequences. The device extracts the archive without properly validating the paths of the individual entries, allowing the attacker to place files outside the intended directory. Because of this flaw the attacker could write executable code or modify critical configuration files, which may lead to complete compromise of the system, loss of confidentiality, integrity and availability.

The vulnerability affects the Frauscher Sensortechnik FDS 102 product. No specific firmware or hardware revision is listed; therefore all deployed FDS 102 devices using the bundled software that allows ZIP uploads are potentially susceptible. The CVE only identifies the vendor and product, with no version restrictions available.

The CVSS score of 8.6 indicates a high severity. The EPSS score is below 1 %, suggesting that mass exploitation is unlikely but the risk remains non‑zero, especially in environments where the device is exposed to untrusted networks. Since the flaw permits remote path traversal that can lead to arbitrary code execution, an attacker with network visibility to the device can exploit it with minimal prerequisites. The vulnerability is not listed in the CISA KEV catalog, but its high severity and the critical nature of its impact warrant immediate attention.