This vulnerability affects the D-Link DCS-5615 device version 1.01.00 and arises from a least privilege violation in an unspecified functionality of the Boa Webserver configuration file /etc/conf.d/boa/boa.conf. The issue allows an unauthenticated remote attacker to perform actions that violate the principle of least privilege. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low attack complexity, no privileges or user interaction required, and limited impact on integrity. Exploit code has been publicly disclosed, but no vendor remediation or patch is currently documented.

An unauthenticated remote attacker can exploit this vulnerability to perform unauthorized actions that violate least privilege constraints on the affected device. This may lead to unauthorized access or control over certain device functions, potentially compromising device security or operation. The impact is limited to integrity violation without confidentiality or availability impact as per the CVSS vector.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or workaround is documented, users should monitor vendor communications for updates. Until a patch is available, consider limiting network exposure of the affected device to trusted networks only.