CVE:CVE-2013-6786
CNNVD:CNNVD-201311-215
Allegro Software Development RomPager是美国Allegro Software Development公司的一套嵌入式Web服务器工具包，它允许用户使用通用的Web浏览器管理和控制网络打印机、交换机和路由器等网络设备的万维网（WWW）服务。
Allegro RomPager 4.07及之前的版本中存在跨站脚本漏洞。远程攻击者可通过创建特制的请求利用该漏洞注入任意Web脚本或HTML。以下产品及型号受到影响：ZyXEL P660HW-D1，Huawei MT882，Sitecom WL-174，TP-LINK TD-8816，D-Link DSL-2640R和DSL-2641R。
solution:Upgrade allegrosoft rompager to a higher version than 4.07,and avoid the version (,4.07]; Upgrade dlink dsl-2640r to a higher version than -; Upgrade dlink dsl-2641r to a higher version than -; Upgrade huawei mt882 to a higher version than -; Upgrade sitecom wl-174 to a higher version than -; Upgrade tp-link td-8816 to a higher version than -; Upgrade zyxel p-660hw_d1 to a higher version than -