This vulnerability involves command injection (CWE-77) in specific D-Link DIR-823X router models. By sending a specially crafted POST request to the /goform/set_prohibiting endpoint, an attacker with authorized access can execute arbitrary commands remotely on the affected devices. The CVSS 3.1 base score is 7.2, reflecting network attack vector, low attack complexity, required high privileges, no user interaction, and high impact on confidentiality, integrity, and availability. No patch or official remediation level has been published as of the current data.

Successful exploitation allows an authorized attacker to execute arbitrary commands on the affected devices remotely, potentially compromising device confidentiality, integrity, and availability. This could lead to full control over the device functions and data. However, exploitation requires authorized access, limiting the attack surface. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, restrict authorized access to the device management interface and monitor for suspicious activity related to POST requests to /goform/set_prohibiting. Avoid exposing device management interfaces to untrusted networks.