A flaw in Acrel Electrical Prepaid Cloud Platform version 1.0 allows an attacker to manipulate the /bin.rar file processed by the Backup File Handler component. The improper handling of this file leads to disclosure of information that should remain confidential during the backup process. The resulting data exposure is the principal impact of the vulnerability.

The only explicitly affected product is Acrel Electrical Prepaid Cloud Platform, version 1.0. No other vendors, versions, or components are listed in the available data.

The vulnerability has a CVSS score of 6.9, indicating moderate severity. The EPSS score is not available, so the exact likelihood of exploitation is unknown, but the flaw is supported by a publicly available exploit. The vendor has not issued a fix, so the risk remains significant. The vulnerability can be exploited remotely, so an attacker does not require local access to the affected system.