EUVD-2026-42692
GHSA-fcxp-r92v-x7h2
Vulnerability Assessment
| Weakness |
CWE
ASVS 5.0
V8 - Authorization Least privilege on resource access
|
Get an e-mail when this CVE is exploited, patched or re-scored. Free account.
Alert meAnalysisAIv1 – Jul 09, 2026
Least-privilege violation in the D-Link DIR-823G router (firmware 1.0.2B05_20181207) stems from insecure configuration of the Boa web server via /etc/boa/boa.conf, allowing an authenticated remote attacker to abuse over-broad privileges to compromise confidentiality, integrity, and availability. Publicly available exploit code exists, but the CVSS 4.0 vector rates attack complexity high (AC:H) and vendor guidance notes exploitation is difficult; there is no public exploit identified as actively exploited (not in CISA KEV). EPSS data was not supplied, but the low-privilege network vector combined with full CIA impact makes this a meaningful risk on exposed devices.
Affected VersionsENISA
Affected Packages
Source: OSV (Open Source Vulnerabilities)
Affects your stack
Affects 1 package in euvd
Checking this CVE against your own stacks and servers is part of the Basic plan and up.
Know when Dir 823G gets its next vulnerability
- Watch products and get an email when something new is published
- Check this CVE against your own stack and servers
- Exploit and PoC references, threat intelligence from 22 sources
No credit card · 7-day full trial
Severity by source
CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Primary rating from Vendor (VulDB) · only source for this CVE.
CVSS VectorVendor: VulDB
Lifecycle Timeline
2DescriptionCVE.org
A weakness has been identified in D-link DIR-823G 1.0.2B05_20181207. Affected by this vulnerability is an unknown functionality of the file /etc/boa/boa.conf of the component Web Interface. Executing a manipulation can lead to least privilege violation. The attack can be launched remotely. The attack requires a high level of complexity. The exploitation appears to be difficult. The exploit has been made available to the public and could be used for attacks.
Executive ViewAI
D-Link DIR-823G routers with firmware 1.0.2B05_20181207 contain a web server configuration vulnerability allowing authenticated remote attackers to compromise device and network integrity and availability. Publicly available exploit code exists, though vendor guidance indicates exploitation is difficult. Without an available vendor patch, the organization must implement interim network controls to reduce exposure.
Within 24 hours: Inventory all D-Link DIR-823G devices on the network and verify firmware versions; restrict administrative interface access (TCP 80, 443) via firewall rules to authorized administrators only; disable remote management if not operationally required. Within 7 days: Contact D-Link support for firmware patch availability and end-of-support status; if patches are unavailable, initiate procurement for replacement routers with active vendor support; enable administrative access logging. Within 30 days: Deploy patched firmware to all vulnerable devices or complete replacement with modern router models; establish firmware update policy for all network equipment to prevent future accumulation of unsupported hardware.
No vendor-released patch identified at time of analysis. Interim mitigations: (1) Enforce network-level access controls restricting administrative interface to approved administrator IP addresses; (2) Disable remote management if operationally feasible; (3) Implement monitoring and alerting on administrative access logs; (4) Segment router management traffic to a restricted administrative network; (5) If non-critical to operations, consider immediate deactivation pending replacement.
Threat Intelligence Overview
NVD
CVE.org
EPSS
Vulnrichment
VulDB
How this decision was reached
The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.
What every action level means
SSVC AssessmentENISA
Priority Score
Attack Technique
Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.
Stack-based buffer overflow in the D-Link DIR-823G router (firmware 1.0.2B05_20181207) lets a remote attacker corrupt st
Least privilege violation in D-Link DIR-823G firmware version 1.0.2B05 exposes the vsftpd FTP daemon configuration file
Exploit-DB