A missing authorization flaw in Dolusoft Sonlogger exposes sensitive administrative functionality to unauthenticated remote attackers.

The application fails to perform adequate access control checks for specific functions, allowing an unauthenticated remote attacker to bypass ACLs and perform actions otherwise restricted to authorized users.

Successful exploitation of this vulnerability allows unauthorized access to core system functions, which can lead to significant information disclosure or unauthorized administrative control over the Sonlogger instance. Given the CVSS score of 7.5, this high-severity flaw poses a critical risk to data confidentiality and system integrity, potentially facilitating deeper network compromise.

Immediate Action: Upgrade Sonlogger to version 6.7.4.8 or later as specified in the vendor security advisory.

Proactive Monitoring: Review system access logs for unusual patterns, such as unauthorized access attempts to administrative endpoints or unexpected API calls from unknown sources.

Compensating Controls: Implement a Web Application Firewall (WAF) to filter and block requests directed at sensitive management paths until the software can be patched.

Public Exploit Available: Unknown.

This vulnerability presents a high risk due to the ease of exploitation for unauthenticated remote actors. Administrators should prioritize patching to version 6.7.4.8 immediately to prevent unauthorized access to the Sonlogger application.