CVE:CVE-2019-20213
CNNVD:CNNVD-202001-005
D-Link DIR-859是中国台湾友讯（D-Link）公司的一款无线路由器。
D-Link DIR-859 v1.07b03之前版本中的vpnconfig.php文件存在信息泄露漏洞。远程攻击者可借助特制请求利用该漏洞获取敏感信息，进一步对系统发起攻击。
solution:Upgrade dlink dir-859_firmware to a higher version than 1.05b03,1.06b01:beta1,and avoid the version (,1.05b03],1.06b01:beta1; Upgrade dlink dir-822_firmware to a higher version than 2.03b01,3.12b04,and avoid the version (,2.03b01],(,3.12b04]; Upgrade dlink dir-823_firmware to a higher version than 1.00b06,and avoid the version (,1.00b06]; Upgrade dlink dir-865l_firmware to a higher version than 1.07b01,and avoid the version (,1.07b01]; Upgrade dlink dir-868l_firmware to a higher version than 1.12b04,2.05b02,and avoid the version (,1.12b04],(,2.05b02]; Upgrade dlink dir-869_firmware to a higher version than 1.03b02,and avoid the version (,1.03b02]; Upgrade dlink dir-880l_firmware to a higher version than 1.08b04,and avoid the version (,1.08b04]; Upgrade dlink dir-890l_firmware to a higher version than 1.11b01,and avoid the version (,1.11b01]; Upgrade dlink dir-890r_firmware to a higher version than 1.11b01,and avoid the version (,1.11b01]; Upgrade dlink dir-885l_firmware to a higher version than 1.12b05,and avoid the version (,1.12b05]; Upgrade dlink dir-885r_firmware to a higher version than 1.12b05,and avoid the version (,1.12b05]; Upgrade dlink dir-895l_firmware to a higher version than 1.12b10,and avoid the version (,1.12b10]; Upgrade dlink dir-895r_firmware to a higher version than 1.12b10,and avoid the version (,1.12b10]; Upgrade dlink dir-818lx_firmware to a higher version than -