CVE:CVE-2018-19614
CNNVD:CNNVD-201905-977
Westermo DR-260等都是瑞典威斯特摩（Westermo）公司的产品。Westermo DR-260是一款DSL路由器。Westermo DR-250是一款DSL路由器。Westermo MR-260是一款3G多媒体路由器。
Westermo DR-260 Router、Westermo DR-250 Router和Westermo MR-260 Router(全部固件版本)中的‘/cmdexec/cmdexe?cmd=’命令控制台存在跨站脚本漏洞。该漏洞源于WEB应用缺少对客户端数据的正确验证。攻击者可利用该漏洞执行客户端代码。
solution:Upgrade westermo dr-250_firmware to a higher version than *; Upgrade westermo dr-260_firmware to a higher version than *; Upgrade westermo mr-260_firmware to a higher version than *