D-Link DGS-1100-08PD Web Interface Least Privilege Violation Vulnerability

A vulnerability exists in the D-Link DGS-1100-08PD switch, specifically in version 1.00.006. The issue arises from an unknown processing flaw in the web interface component, related to the file /etc/boa.conf. This flaw allows for a least privilege violation, potentially enabling unauthorized actions or access. The vulnerability can be exploited remotely, but doing so requires a high level of complexity, making the exploitation difficult.

Impact

Exploitation of this vulnerability could lead to unauthorized actions or access, allowing an attacker to bypass normal privilege restrictions.