The MSI NBFoundation Service v.2.0.2506.1201 contains an insecure permissions flaw that allows a remote attacker to obtain sensitive information via 3DES-ECB encryption. The vulnerability stems from improper access control, enabling the attacker to read or extract confidential data and thereby compromise confidentiality.

The affected product is MSI NBFoundation Service version 2.0.2506.1201. No other vendors or versions are listed.

No EPSS score is available and the vulnerability is not listed in the CISA KEV catalog, indicating limited publicly known exploitation. Because the service uses insecure permissions, a remote attacker could potentially read or exfiltrate encrypted data without overt intrusion. The lack of a CVSS score limits precise severity assessment, but the potential for confidentiality loss warrants cautious mitigation.