This vulnerability affects the D-link DIR-823G router version 1.0.2B05_20181207. It stems from a weakness in an unspecified functionality of the /etc/boa/boa.conf file used by the web interface component. An attacker can remotely manipulate this to violate least privilege constraints, potentially gaining elevated privileges. The attack complexity is high, and no user interaction is required. The vulnerability has a CVSS 4.0 score of 7.7, indicating high severity. No vendor-provided patch or remediation level is documented, and the exploit code is publicly available, though exploitation is considered difficult.

Successful exploitation allows a remote attacker to violate least privilege restrictions on the affected device, potentially leading to unauthorized elevated privileges. This could compromise the integrity and security of the device's web interface and underlying system. The attack requires high complexity and no user interaction, limiting the likelihood but not eliminating risk. No known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official fix or remediation level is provided, users should monitor D-link communications for updates. Until a patch is available, restricting remote access to the device's web interface and applying network-level controls to limit exposure may reduce risk.