Executive Summary

This vulnerability exists in the D-Link DGS-1100-08PD device, specifically in the processing of the file /etc/boa.conf within its Web Interface component.

The issue allows for a least privilege violation, meaning an attacker could gain higher privileges than intended.

The attack can be launched remotely but requires a high level of complexity and is considered difficult to exploit.

Despite the difficulty, an exploit is publicly available.

Useful 0 Not Useful 0

Impact Analysis

The vulnerability can lead to a least privilege violation, potentially allowing an attacker to perform actions or access resources beyond their authorized level.

Since the attack can be launched remotely, it increases the risk of unauthorized access to the device's web interface.

However, the exploitability is difficult and requires a high level of complexity, which may limit the likelihood of successful exploitation.

Useful 0 Not Useful 0