漏洞总结：Central Management Software 1.4.13 拒绝服务漏洞 (PoC) 漏洞概述 EDB-ID: 45207 作者: Gionathan Reale 发布日期: 2018-08-16 漏洞类型: 拒绝服务 (DoS) 平台: Windows x86 64-bit 受影响版本: Central Management Software v1.4.13 影响范围 操作系统: Windows 10 软件版本: 1.4.13 漏洞描述: 通过构造恶意输入，导致CMS客户端程序崩溃。 修复方案 目前页面未提供具体的修复方案或补丁信息。 POC代码 ```python #!/usr/bin/python Exploit Title: Central Management Software v1.4.13 - Denial of Service (PoC) Author: Gionathan "John" Reale Discovery Date: 2018-08-16 Homepage: https://www.ambientweather.com Software Link: https://p10.secure.hostingprod.com/@site.ambientweatherstore.com/ssl/Manuals/ambientcam/04_central_management_software.zip Tested Version: 1.4.13 Tested on OS: Windows 10 Steps to Reproduce: Run the python exploit script, it will create a new file with the name "exploit.txt" just copy the text inside "exploit.txt" and start the CMS client program. In the new window paste the content of "exploit.txt" into the following fields: "Password". Click "login" and you will see a crash.