This vulnerability in D-link DIR-823G 1.0.2B05_20181207 concerns an unknown functionality within the /etc/boa/boa.conf file of the web interface, which can be manipulated remotely to violate least privilege constraints. The attack vector is network-based, requiring no user interaction but a high complexity level. The CVSS 4.0 base score is 7.7, reflecting high severity with network attack vector, high attack complexity, and high impact on confidentiality, integrity, and availability. No vendor remediation or patch information is currently available, and the device is not a cloud service. The exploit is publicly known but exploitation in the wild is not confirmed.

Successful exploitation could allow an attacker to perform actions beyond their intended privilege level on the affected device, potentially compromising confidentiality, integrity, and availability of the system. However, the high attack complexity and lack of confirmed exploitation in the wild reduce immediate risk.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, monitor vendor communications for updates. Due to the high complexity of exploitation, immediate urgent action may not be required, but affected devices should be closely managed and access to the web interface restricted where possible.