CVE:CVE-2019-19823
CNNVD:CNNVD-202001-1179
TotoLink A3002RU是中国台湾吉翁电子（TotoLink）公司的一款无线路由器产品。
多款TotoLink产品中存在安全漏洞，该漏洞源于程序将明文管理密码存储在闪存和文件中。远程攻击者可借助特制请求利用该漏洞获取用户凭据，并发起进一步的攻击。以下产品及版本受到影响：TotoLink A3002RU 2.0.0及之前版本；A702R 2.1.3及之前版本；N301RT 2.1.6及之前版本；N302R 3.4.0及之前版本；N300RT 3.4.0及之前版本；N200RE 4.0.0及之前版本；N150RT 3.4.0及之前版本；N100RE 3.4.0及之前版本；Rutek RTK 11N AP 2019-12-12及之前版本；Sapido GR297n 2019-12-12及之前版本；CIK TELECOM MESH ROUTER 2019-12-12及之前版本；KCTVJEJU Wireless AP 2019-12-12及之前版本；Fibergate FGN-R2 2019-12-12及之前版本；Hi-Wifi MAX-C300N 2019-12-12及之前版本；HCN MAX-C300N 2019-12-12及之前版本；T-broad GN-866ac 2019-12-12及之前版本；Coship EMTA AP 2019-12-12及之前版本；IO-Data WN-AC1167R 2019-12-12及之前版本。
solution:Upgrade totolink a3002ru_firmware to a higher version than 2.0.0,and avoid the version (,2.0.0]; Upgrade totolink a702r_firmware to a higher version than 2.1.3,and avoid the version (,2.1.3]; Upgrade totolink n302r_firmware to a higher version than 3.4.0,and avoid the version (,3.4.0]; Upgrade totolink n300rt_firmware to a higher version than 3.4.0,and avoid the version (,3.4.0]; Upgrade totolink n200re_firmware to a higher version than 4.0.0,and avoid the version (,4.0.0]; Upgrade totolink n150rt_firmware to a higher version than 3.4.0,and avoid the version (,3.4.0]; Upgrade totolink n100re_firmware to a higher version than 3.4.0,and avoid the version (,3.4.0]; Upgrade realtek rtk_11n_ap_firmware to a higher version than 2019-12-12,and avoid the version (,2019-12-12]; Upgrade sapido gr297n_firmware to a higher version than 2019-12-12,and avoid the version (,2019-12-12]; Upgrade ciktel mesh_router_firmware to a higher version than 2019-12-12,and avoid the version (,2019-12-12]; Upgrade kctvjeju wireless_ap_firmware to a higher version than 2019-12-12,and avoid the version (,2019-12-12]; Upgrade fg-products fgn-r2_firmware to a higher version than 2019-12-12,and avoid the version (,2019-12-12]; Upgrade hiwifi max-c300n_firmware to a higher version than 2019-12-12,and avoid the version (,2019-12-12]; Upgrade tbroad gn-866ac_firmware to a higher version than 2019-12-12,and avoid the version (,2019-12-12]; Upgrade coship emta_ap_firmwre to a higher version than 2019-12-12,and avoid the version (,2019-12-12]; Upgrade iodata wn-ac1167r_firmwre to a higher version than 2019-12-12,and avoid the version (,2019-12-12]; Upgrade hcn_max-c300n_project hcn_max-c300n_firmware to a higher version than 2019-12-12,and avoid the version (,2019-12-12]; Upgrade totolink n301rt_firmware to a higher version than 2.1.6,and avoid the version (,2.1.6]