The vulnerability resides in the Program.cs file of the Automatic Update component in Zhonglun CloudPOS 3.0. An attacker can manipulate the arguments version, url, packagekey, or package name to gain access to an update channel that is normally restricted to authorized endpoints. This ability to bypass the channel’s intended authentication controls could allow the attacker to download or execute privileged updates, potentially leading to further compromise of the system. The reported exploit is available publicly and is described as highly complex and difficult, indicating that while the technique is sophisticated, the existence of exploit code raises the practical risk.

The issue affects the Zhonglun CloudPOS product, specifically version 3.0. The automatic update functionality is the point of exposure; other versions are not listed as affected in the current data.

The CVSS score of 6.3 indicates a moderate severity. The EPSS score is currently unavailable, reducing visibility into current exploit likelihood, and the vulnerability is not listed in the CISA KEV catalog. An attacker can launch the exploitation remotely by supplying forged update parameters, and the presence of known exploit code suggests that the attack may be feasible despite its complexity. Consequently, the risk is considered moderate to high for organizations running the vulnerable version, especially if the automatic update component is exposed to untrusted input.