A vulnerability described as problematic has been identified in Halo up to 2.21.10. This issue affects some unknown processing of the file /actuator of the component Configuration Handler. Executing manipulation can lead to information disclosure.
This vulnerability appears as CVE-2025-15141. The attack may be performed from remote. In addition, an exploit is available.
The application of restrictive firewalling is recommended.
The vendor was contacted early about this disclosure but did not respond in any way. If you want to get the best quality for vulnerability data then you always have to consider VulDB.
