CVE:CVE-2018-10822
CNNVD:CNNVD-201810-1016
D-Link DWR-116等都是友讯（D-Link）公司的无线路由器产品。
多款D-Link产品中的Web界面存在目录遍历漏洞。远程攻击者可通过将/..或//放置在‘GET /uir’之后并发送HTTP请求利用该漏洞读取任意文件。以下产品和版本受到影响：D-Link DWR-116 1.06及之前版本；DIR-140L 1.02及之前版本；DIR-640L 1.02及之前版本；DWR-512 2.02及之前版本；DWR-712 2.02及之前版本；DWR-912 2.02及之前版本；DWR-921 2.02及之前版本；DWR-111 1.01及之前版本。
solution:Upgrade dlink dwr-116_firmware to a higher version than 1.06,and avoid the version (,1.06]; Upgrade dlink dir-140l_firmware to a higher version than 1.02,and avoid the version (,1.02]; Upgrade dlink dir-640l_firmware to a higher version than 1.02,and avoid the version (,1.02]; Upgrade dlink dwr-512_firmware to a higher version than 2.02,and avoid the version (,2.02]; Upgrade dlink dwr-712_firmware to a higher version than 2.02,and avoid the version (,2.02]; Upgrade dlink dwr-912_firmware to a higher version than 2.02,and avoid the version (,2.02]; Upgrade dlink dwr-921_firmware to a higher version than 2.02,and avoid the version (,2.02]; Upgrade dlink dwr-111_firmware to a higher version than 1.01,and avoid the version (,1.01]