This vulnerability affects D-Link DNS-320 version 1.0.2 and arises from improper handling of the 'Malicious Handler' argument in the /web/function/save_ajax.php file, which leads to unrestricted file upload. The vulnerability can be exploited remotely without authentication or user interaction. The CVSS 4.0 base score is 6.9 (medium severity), reflecting network attack vector, low complexity, no privileges or user interaction required, and low impact on confidentiality, integrity, and availability. There is no vendor advisory or patch information available at this time.

Successful exploitation allows remote attackers to upload arbitrary files to the affected device, potentially leading to unauthorized code execution or further compromise. The impact on confidentiality, integrity, and availability is rated as low, but the unrestricted upload capability poses a significant risk if leveraged in an attack chain.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict network access to the device's management interface and monitor for suspicious activity related to file uploads.