CVE-2023-30459 PoC — Motorola SmartPTT SCADA 安全漏洞

Source

https://github.com/Toxich4/CVE-2023-30459

Associated Vulnerability

Title: Motorola SmartPTT SCADA 安全漏洞 (CVE-2023-30459)
Description:SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges) by writing a malicious C# script and executing it on the server (via server settings in the administrator control panel on port 8101, by default).

Description

CVE-2023-30459

Readme

# CVE-2023-30459
SmartPTT SCADA 1.1.0.0 allows remote code execution (when the attacker has administrator privileges)
by writing a malicious C# script and executing it on the server
(via server settings in the administrator control panel on port 8101, by default).

How to use:
> python CVE-2023-30459.py -t 127.0.0.1 -p elcomplus -cmd "shutdown /s /t 30"

PoC:
![Image alt](https://github.com/Toxich4/CVE-2023-30459/blob/main/PoC.gif)

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →