CVE:CVE-2019-6487
CNNVD:CNNVD-201901-747
TP-Link WDR Series是中国普联（TP-Link）公司的一款WDR系列无线路由器。
使用v3版本固件（例如：TL-WDR5620 V3.0版本）的TP-Link WDR Series中存在操作系统命令注入漏洞，该漏洞源于‘citycode’字段中包含了sehll元字符。远程攻击者可利用该漏洞执行代码。
solution:Upgrade tp-link tl-wdr5620_firmware to a higher version than 3.0,and avoid the version (,3.0]; Upgrade tp-link tl-wdr3500_firmware to a higher version than 3.0,and avoid the version (,3.0]; Upgrade tp-link tl-wdr3600_firmware to a higher version than 3.0,and avoid the version (,3.0]; Upgrade tp-link tl-wdr4300_firmware to a higher version than 3.0,and avoid the version (,3.0]; Upgrade tp-link tl-wdr4900_firmware to a higher version than 3.0,and avoid the version (,3.0]