CVE:CVE-2016-5681
CNNVD:CNNVD-201608-243
D-Link DIR-850L等都是友讯（D-Link）公司的无线路由器。
多款D-Link产品中的dws/api/Login文件存在基于栈的缓冲区溢出漏洞。远程攻击者可借助长的会话Cookie利用该漏洞执行任意代码。以下产品和版本受到影响：D-Link DIR-850L B1 2.07WWB05之前的2.07版本，DIR-817 Ax，DIR-818LW Bx 2.05b03beta03之前的版本，DIR-822 C1 3.01WWb02之前的3.01版本，DIR-823 A1 1.00WWb05之前的1.00版本，DIR-895L A1 1.11WWb04之前的1.11版本，DIR-890L A1 1.09b14之前的1.09版本，DIR-885L A1 1.11WWb07之前的1.11版本，DIR-880L A1 1.07WWb08之前的1.07版本，DIR-868L B1 2.03WWb01之前的2.03版本，DIR-868L C1 3.00WWb01之前的3.00版本。
solution:Upgrade dlink dir-868l_firmware to a higher version than 2.03,3.00,and avoid the version (,2.03],(,3.00]; Upgrade dlink dir-822_firmware to a higher version than 3.01,and avoid the version 3.01; Upgrade d-link dir-880l_firmware to a higher version than 1.07,and avoid the version (,1.07]; Upgrade d-link dir-850l_firmare to a higher version than 2.07,and avoid the version (,2.07]; Upgrade d-link dir-895l_firmware to a higher version than 1.11,and avoid the version (,1.11]; Upgrade d-link dir-817l(w)_firmware to a higher version than jul.2016,and avoid the version (,jul.2016]; Upgrade d-link dir-818l(w)_firmware to a higher version than 2.05,and avoid the version (,2.05]; Upgrade d-link dir-890l_firmware to a higher version than 1.09,and avoid the version (,1.09]; Upgrade d-link dir-823_firmware to a higher version than 1.00,and avoid the version (,1.00]; Upgrade d-link dir-885l_firmware to a higher version than 1.11,and avoid the version (,1.11]