CVE:CVE-2018-6530
CNNVD:CNNVD-201803-149
D-Link DIR-880L等都是友讯（D-Link）公司的无线路由器产品。
多款D-Link产品中的soap.cgi文件存在操作系统命令注入漏洞。远程攻击者可借助‘service’参数利用该漏洞执行任意的操作系统命令。以下产品和版本受到影响：D-Link DIR-880L DIR-880L_REVA_FIRMWARE_PATCH_1.08B04及之前版本；DIR-868L DIR868LA1_FW112b04及之前版本；DIR-65L DIR-865L_REVA_FIRMWARE_PATCH_1.08.B01之前版本；DIR-860L DIR860LA1_FW110b04及之前版本。
solution:Upgrade d-link dir-860l_firmware to a higher version than a1_fw110b04,and avoid the version (,a1_fw110b04]; Upgrade dlink dir-865l_firmware to a higher version than reva_firmware_patch_1.08.b01,and avoid the version (,reva_firmware_patch_1.08.b01]; Upgrade dlink dir-868l_firmware to a higher version than a1_fw112b04,and avoid the version (,a1_fw112b04]; Upgrade d-link dir-880l_firmware to a higher version than reva_firmware_patch_1.08b04,and avoid the version (,reva_firmware_patch_1.08b04]