CVE:CVE-2019-17621
CNNVD:CNNVD-201912-1224
D-Link DIR-859是中国台湾友讯（D-Link）公司的一款无线路由器。
D-Link DIR-859 1.05版本和1.06B01 Beta01版本中涉及UPnP请求的代码存在安全漏洞。远程攻击者可借助特制的HTTP SUBSCRIBE请求利用该漏洞以root权限执行系统命令。
solution:Upgrade dlink dir-859_firmware to a higher version than 1.05b03,1.06b01:beta1,and avoid the version (,1.05b03],1.06b01:beta1; Upgrade dlink dir-822_firmware to a higher version than 2.03b01,3.12b04,and avoid the version (,2.03b01],(,3.12b04]; Upgrade dlink dir-823_firmware to a higher version than 1.00b06,1.00b06:beta,and avoid the version (,1.00b06],1.00b06:beta; Upgrade dlink dir-865l_firmware to a higher version than 1.07b01,and avoid the version (,1.07b01]; Upgrade dlink dir-868l_firmware to a higher version than 1.12b04,2.05b02,and avoid the version (,1.12b04],(,2.05b02]; Upgrade dlink dir-869_firmware to a higher version than 1.03b02,1.03b02:beta02,and avoid the version (,1.03b02],1.03b02:beta02; Upgrade dlink dir-880l_firmware to a higher version than 1.08b04,and avoid the version (,1.08b04]; Upgrade dlink dir-890l_firmware to a higher version than 1.11b01,1.11b01:beta01,and avoid the version (,1.11b01],1.11b01:beta01; Upgrade dlink dir-890r_firmware to a higher version than 1.11b01,1.11b01:beta01,and avoid the version (,1.11b01],1.11b01:beta01; Upgrade dlink dir-885l_firmware to a higher version than 1.12b05,and avoid the version (,1.12b05]; Upgrade dlink dir-885r_firmware to a higher version than 1.12b05,and avoid the version (,1.12b05]; Upgrade dlink dir-895l_firmware to a higher version than 1.12b10,and avoid the version (,1.12b10]; Upgrade dlink dir-895r_firmware to a higher version than 1.12b10,and avoid the version (,1.12b10]; Upgrade dlink dir-818lx_firmware to a higher version than -