This vulnerability affects the D-Link DIR-1253 MESH router firmware version 1.6.1684. An attacker can exploit an issue related to the etc/shadow.sample component to escalate privileges, potentially gaining unauthorized administrative access. The CVSS 3.1 base score of 9.8 reflects a network attack vector with low complexity, no privileges required, and no user interaction needed, resulting in high impact on confidentiality, integrity, and availability. No official patch or vendor advisory is currently available to confirm remediation status.

Successful exploitation can lead to complete system compromise, including unauthorized administrative access and control over the affected device. This can result in full disclosure of sensitive information, modification or deletion of data, and disruption of device availability. Given the critical CVSS score, the impact is severe.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict network access to the affected device and monitor for suspicious activity related to privilege escalation attempts. Avoid exposing the device to untrusted networks.