The vulnerability is a directory traversal flaw in the uploadSSL method that allows a logged‑in user to supply an unvalidated file path and delete arbitrary files on the system. This deletion can cause data loss, compromise configuration files, or trigger a denial‑of‑service condition, as described by CWE‑22.

All ATEN Unizon installations that expose the uploadSSL functionality and permit authenticated access are affected. No specific product version was listed in the advisory.

The CVSS score of 5.5 indicates moderate severity. The EPSS score is 1% and the vulnerability is not in CISA’s KEV catalog. Exploitation requires authenticated remote access to the uploadSSL endpoint; once authenticated, an attacker can specify any file path and delete the target file, potentially affecting critical system files or configuration data.