CVE-2024-22734 PoC — AMCS Group Trux Waste Management Software 安全漏洞

Source

https://github.com/securekomodo/CVE-2024-22734

Associated Vulnerability

Title:AMCS Group Trux Waste Management Software 安全漏洞 (CVE-2024-22734)
Description:An issue was discovered in AMCS Group Trux Waste Management Software before version 7.19.0018.26912, allows local attackers to obtain sensitive information via a static, hard-coded AES Key-IV pair in the TxUtilities.dll and TruxUser.cfg components.

Description

Exploit POC for CVE-2024-22734 affecting AMCS Trux Software

Readme

# CVE-2024-22734  
**Exploit PoC for CVE-2024-22734**
![image](https://github.com/user-attachments/assets/573bf82e-e7b8-48bf-8d9d-231d5edb8f34)


This repository contains the exploit source Proof of Concept (PoC) for **CVE-2024-22734**, a vulnerability discovered by **Bryan Smith** of **Redline Cyber Security**. For detailed information about the vulnerability, please refer to our blog post: [CVE-2024-22734: Exploit POC Write-Up](https://www.redlinecybersecurity.com/blog/cve-2024-22734).

## Vulnerability Overview  
**CVE-2024-22734** is a critical security issue affecting **AMCS Trux Software** [https://www.amcsgroup.com/solutions/enterprise-management/trux/](https://www.amcsgroup.com/solutions/enterprise-management/trux/). This vulnerability allows a local attacker to decrypt the credentials of the master database account due to the use of **static hard-coded AES keys** in the application's DLL structures.

## Disclaimer  
This PoC is provided for **educational and research purposes only**. Use of this PoC against unauthorized systems is strictly prohibited and may violate laws or agreements. The authors are not responsible for misuse or damages.

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!