This vulnerability arises from the writeFileToHttpServletResponse method in ATEN Unizon, where the application fails to validate a user‑supplied file path before performing file operations. The result is a directory traversal flaw that allows a remote attacker to request arbitrary files from the server's file system. No authentication is required to trigger the exploit, and the files can be read in the context of the SYSTEM account, giving the attacker access to potentially sensitive configuration or log data.

The affected vendor is ATEN, specifically its Unizon product line. No specific product version numbers are specified in the advisory, so all installations of ATEN Unizon remain at risk until the vendor releases a fix.

The CVSS score of 7.5 indicates a high severity risk. Although an EPSS score is not provided, the lack of authentication and SYSTEM‑level read access suggest that exploitation requires only a simple crafted HTTP request, which is likely to be automated by scanners. The vulnerability is not currently listed in the CISA KEV catalog, but its impact and ease of exploitation make it a significant threat to confidentiality of internal data.