CVE:CVE-2018-18009
CNNVD:CNNVD-201812-1007
D-Link DIR-140L和DIR-640L都是友讯（D-Link）公司的无线路由器产品。
D-Link DIR-140L 1.02版本和DIR-640L 1.01RU版本中的dirary0.js文件存在安全漏洞。远程攻击者可利用该漏洞泄露admin凭证。
solution:Upgrade dlink dir-140l_firmware to a higher version than 1.02,and avoid the version 1.02; Upgrade dlink dir-640l_firmware to a higher version than 1.01ru,and avoid the version 1.01ru