CVE-2017-14425

CVE-2017-14425 is a privilege escalation vulnerability affecting D-Link DIR-850L REV. A and REV. B routers, where the /var/etc/hnapasswd file has insecure 0666 permissions. This allows a local, authenticated attacker to read, modify, or delete sensitive authentication data. With a CVSS score of 7.8 (High), the vulnerability poses a significant risk for confidentiality, integrity, and availability, requiring low attack complexity and no user interaction. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.