CVE-2024-53522 PoC — Bangkok Medical Software HOSxP XE 安全特征问题漏洞

Source

https://github.com/Safecloudth/CVE-2024-53522

Associated Vulnerability

Title: Bangkok Medical Software HOSxP XE 安全特征问题漏洞 (CVE-2024-53522)
Description:Bangkok Medical Software HOSxP XE v4.64.11.3 was discovered to contain a hardcoded IDEA Key-IV pair in the HOSxPXE4.exe and HOS-WIN32.INI components. This allows attackers to access sensitive information.

Description

PoC for CVE-2024-53522 affecting HOSxP XE 4

Readme

# CVE-2024-53522
**Exploit PoC for CVE-2024-53522**
![image](Example.png)


This repository contains the Proof of Concept (PoC) for **CVE-2024-53522**, a vulnerability discovered by **Safecloud Co., Ltd.** For detailed information about the vulnerability, please refer to our blog post: [CVE-2024-53522: HOSxP Software 0day Discover & Exploitation](https://www.safecloud.co.th/researches/blog/CVE-2024-53522)

## Vulnerability Overview  
**CVE-2024-53522** is a critical security issue affecting **HOSxP XE** [https://hosxp.net/](https://hosxp.net/). This vulnerability allows a local attacker to decrypt the credentials of the priviledge database credential due to the use of **static hard-coded private key-IV** in the application.

## Disclaimer  
This PoC is provided for **educational and research purposes only**. Use of this PoC against unauthorized systems is strictly prohibited and may violate laws or agreements. The authors are not responsible for misuse or damages.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →