Angeet ES3 KVM contains a flaw that allows a remote, unauthenticated attacker to write arbitrary files on the system, including configuration files or system binaries. The description states that modified configuration files or system binaries could enable a complete takeover of the affected system. This represents an Authentication Bypass vulnerability (CWE‑306) that can lead to confidentiality, integrity, and availability compromise through remote code execution.

The vulnerable product is Angeet ES3 KVM. No specific version information is listed in the data, so all released versions of this product may potentially be affected until an official update is issued.

The CVSS score of 9.3 indicates high severity. The EPSS score is not available, and the vulnerability is not listed in the KEV catalog. The likely attack vector is remote over the network to the KVM interface; however, the exact prerequisites are not detailed, so this inference is based on the fact that the attack is described as remote and unauthenticated.