CVE:CVE-2018-19613
CNNVD:CNNVD-201905-997
Westermo DR-260等都是瑞典威斯特摩（Westermo）公司的产品。Westermo DR-260是一款DSL路由器。Westermo DR-250是一款DSL路由器。Westermo MR-260是一款3G多媒体路由器。
Westermo DR-260、DR-250和MR-260中存在跨站请求伪造漏洞。该漏洞源于WEB应用未充分验证请求是否来自可信用户。攻击者可利用该漏洞通过受影响客户端向服务器发送非预期的请求。
solution:Upgrade westermo dr-260_firmware to a higher version than *; Upgrade westermo dr-250_firmware to a higher version than *; Upgrade westermo mr-260_firmware to a higher version than *