CVE-2025-31964 HCL BigFix IVR 不当服务绑定配置漏洞

# CVE-2025-31964 PoC - Service Binding Configuration Check # This PoC demonstrates how to check for exposed administrative services import socket import sys def check_port_exposure(host, port, service_name): """Check if a service port is exposed to external network""" try: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(5) result = sock.connect_ex((host, port)) if result == 0: print(f"[+] WARNING: {service_name} (port {port}) is exposed on {host}") return True else: print(f"[-] {service_name} (port {port}) is not accessible on {host}") return False except Exception as e: print(f"[-] Error checking {service_name}: {e}") return False finally: sock.close() def main(): if len(sys.argv) < 2: print("Usage: python cve_2025_31964_poc.py <target_ip>") sys.exit(1) target = sys.argv[1] # Common BigFix IVR administrative ports to check admin_ports = [ (8080, "BigFix IVR Web Console"), (8443, "BigFix IVR Secure Portal"), (52311, "BigFix IVR Root Server") ] print(f"[*] Checking for exposed services on {target}...") print("[*] This PoC checks if administrative services are incorrectly bound to external interfaces") exposed = False for port, service in admin_ports: if check_port_exposure(target, port, service): exposed = True if exposed: print("\n[!] Potential CVE-2025-31964 vulnerability detected!") print("[!] Administrative services appear to be exposed to external network") else: print("\n[*] No exposed administrative services detected") if __name__ == "__main__": main()