This vulnerability affects the D-Link DIR-816 router firmware version 1.10CNB05_R1B011D88210. It arises from insufficient input validation in the portForward function, specifically in the handling of the ip_address parameter. An attacker can remotely supply crafted input to this parameter, resulting in command injection on the device. The vulnerability is remotely exploitable without user interaction and requires low attack complexity and privileges. The CVSS 4.0 vector indicates network attack vector, low complexity, no privileges required, no user interaction, and low impact on confidentiality, integrity, and availability. No official patch or remediation guidance is currently available from the vendor.

Successful exploitation allows remote attackers to execute arbitrary commands on the affected router, potentially leading to unauthorized control or disruption of the device. The impact is rated medium due to limited confidentiality, integrity, and availability impact as per the CVSS vector. There are no known exploits in the wild at this time, but public exploit code exists.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is released, users should consider restricting remote access to the router's management interface and avoid exposing the device to untrusted networks. Monitoring vendor channels for updates is recommended.