An unauthenticated attacker can use insufficient input validation to perform a path traversal that reaches backend components beyond the intended boundaries. The flaw allows reading files and data that should be protected, leading to the exposure of sensitive information.

The affected products are WAGO Device Sphere and WAGO Solution Builder. Version data is not provided, so any installation of these products should be considered potentially vulnerable.

The CVSS score of 7.5 indicates a high severity. EPSS information is not available, and the vulnerability is not listed in the CISA KEV catalog. The description specifies a remote, unauthenticated attacker, so the attack vector is inferred to be network based. No explicit exploitation examples are disclosed, but the high severity score signals significant risk if the flaw remains unpatched.