This vulnerability in D-Link DCS-5615 version 1.01.00 stems from a least privilege violation related to the Boa Webserver configuration file /etc/conf.d/boa/boa.conf. The issue allows an unauthenticated remote attacker to perform actions that violate the principle of least privilege. The CVSS 4.0 base score is 6.9 (medium severity) with attack vector network, low attack complexity, no privileges required, no user interaction, and limited impact on integrity. The vulnerability is publicly disclosed but lacks an official fix or vendor advisory detailing remediation steps.

An unauthenticated remote attacker can exploit this vulnerability to perform unauthorized actions that violate least privilege constraints on the affected device. This could potentially allow the attacker to escalate privileges or access restricted functionality. However, the impact is limited to integrity with no confidentiality or availability impact indicated. There are no known active exploits in the wild currently.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. No specific mitigations or workarounds have been provided by the vendor at this time.