CVE:CVE-2018-19612
CNNVD:CNNVD-201905-995
Westermo DR-260等都是瑞典威斯特摩（Westermo）公司的产品。Westermo DR-260是一款DSL路由器。Westermo DR-250是一款DSL路由器。Westermo MR-260是一款3G多媒体路由器。
Westermo DR-260、DR-250和MR-260中的/uploadfile?功能存在安全漏洞。远程攻击者可利用该漏洞上传恶意的文件类型并执行ASP的代码。
solution:Upgrade westermo dr-250_firmware to a higher version than *; Upgrade westermo dr-260_firmware to a higher version than *; Upgrade westermo mr-260_firmware to a higher version than *