This vulnerability affects D-Link DGS-1100-08PD version 1.00.006 and arises from improper handling of the /etc/boa.conf file by the device's web interface. This flaw leads to a least privilege violation, potentially allowing an attacker to perform actions beyond their intended permissions. The attack vector is remote network access, but exploitation complexity is high and no user interaction is required. The CVSS 4.0 base score is 6.3, reflecting medium severity. There is no vendor advisory or patch information available at this time.

Successful exploitation could allow an attacker to bypass privilege restrictions on the affected device, potentially leading to unauthorized access or control over certain device functions. However, the high complexity of the attack and lack of known exploits in the wild reduce the immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. Due to the high complexity of exploitation, immediate urgent action may not be necessary, but affected devices should be reviewed for exposure and access restricted where possible.