CVE:CVE-2019-16313
CNNVD:CNNVD-201909-707
智蜂网科技 ifw8 Router ROM是中国智蜂网科技公司的一套路由器操作系统。
智蜂网科技 ifw8 Router ROM v4.31版本中存在信息泄露漏洞。攻击者可通过读取action/usermanager.htm HTML源码利用该漏洞泄露凭证。
solution:Upgrade ifw8 fr6_firmware to a higher version than 4.31,and avoid the version 4.31; Upgrade ifw8 fr8_firmware to a higher version than 4.31,and avoid the version 4.31; Upgrade ifw8 fr5_firmware to a higher version than 4.31,and avoid the version 4.31; Upgrade ifw8 fr5-e_firmware to a higher version than 4.31,and avoid the version 4.31; Upgrade ifw8 fr6-s_firmware to a higher version than 4.31,and avoid the version 4.31