This vulnerability in D-Link DIR-823G 1.0.2B05 arises from a least privilege violation in an unspecified function within the vsftpd configuration file (/etc/vsftpd.conf). The flaw allows an attacker to perform unauthorized actions remotely, potentially escalating privileges beyond intended limits. The CVSS 4.0 base score is 5.3, indicating medium severity, with attack vector network, low attack complexity, no privileges required, no user interaction, and limited impact on integrity. The vulnerability is publicly known, but no official patch or remediation level has been provided by the vendor.

Exploitation of this vulnerability could allow a remote attacker to violate least privilege constraints on the affected device, potentially enabling unauthorized actions or access. The impact is limited to the integrity of the system with no reported confidentiality or availability effects. No known active exploitation has been reported in the wild.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or temporary mitigation has been announced, users should monitor vendor communications for updates. Until a patch is available, restricting remote access to the affected device and limiting exposure of the vsftpd service may reduce risk.