Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%

CVE-2025-1718 PoC — Hitachi Relion 安全漏洞

Source
Associated Vulnerability
Title: Hitachi Relion 安全漏洞 (CVE-2025-1718)
Description:An authenticated user with file access privilege via FTP access can cause the Relion 670/650 and SAM600-IO series device to reboot due to improper disk space management.
Description
CVE-2025-1718 - Hitachi Energy FTP Reboot Vulnerability Scanner
Readme

# 🚨 CVE-2025-1718 Scanner - FTP Reboot Vulnerability in Hitachi Energy Devices

![CVE](https://img.shields.io/badge/CVE-2025--1718-red) ![Python](https://img.shields.io/badge/Language-Python-blue) ![Status](https://img.shields.io/badge/Status-Active-green)

## 📌 Description

**CVE-2025-1718** is a high-severity vulnerability in **Hitachi Energy Relion 670/650** and **SAM600-IO** products. A local authenticated user with FTP access can **cause the device to reboot** unexpectedly by **exhausting disk space**, leading to **denial of service (DoS)**.

- **Attack Vector:** Network (FTP)
- **Privileges Required:** Low (Authenticated FTP access)
- **Impact:** System reboot (DoS)
- **CVSS Score:** 7.1 (High)

---

## 🛠️ Features

- ✅ FTP authentication and connection
- ✅ Disk space check trigger
- ✅ Log output with color and effects
- ✅ Safe threading & timeout
- ✅ Custom banner

---

## 🚀 Installation

```bash
git clone https://github.com/issamjr/CVE-2025-1718-Scanner.git
cd CVE-2025-1718-Scanner
pip install -r requirements.txt
```

---

## ⚙️ Usage

```bash
python3 scanner.py --host <TARGET_IP> --port 21 --user <FTP_USER> --pass <FTP_PASS>
```

Example:

```bash
python3 scanner.py --host 192.168.1.100 --port 21 --user test --pass test123
```

---

## ⚠️ Disclaimer

This tool is for educational and authorized testing purposes only. Misuse may violate laws and result in criminal charges.

---

## 👨‍💻 Developed by [issamjr](https://github.com/issamjr)
File Snapshot

Log in to view the POC file snapshot cached by Shenlong Bot

Log in to view
Remarks
    1. It is advised to access via the original source first.
    2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.
    3. Mirroring, verifying, and maintaining this POC archive takes ongoing effort, so local snapshots are a paid feature. Your subscription keeps the archive online — thank you for the support. View subscription plans →