7.5highHigh
CVE-2026-15270
Dlink Dir-823g Firmware
A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. Executing a manipulation can lead to least privilege violation. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been made available to the public and could be used for attacks.
What the metrics mean
- It is reachable over a network, without needing local access.
- For an attacker who can reach it, exploitation depends on conditions outside the attacker's control.
- To exploit it, an ordinary user account is needed.
- Beyond that, no action by a user is required.
Scoring
- CVSS
- 7.5 (v3.1)
- Vector
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H- CVSS v4
- 6.8
- Weakness
- CWE-266
- Assigned by
- cna@vuldb.com
Dates
- Published
- 2026-07-09
- Last modified
- 2026-09-03
- Sources
- NVD
Affected products
- Dlink Dir-823g Firmware1.0.2b05 20181207
- Dlink Dir-823gall versions
As listed in the NVD configuration data. Not a statement about your estate.