It's possible to access router's internal information with URL like http://target/html/defs/.
vulners.com/securityvulns/securityvulns:doc:14888