cve_2023_29360_streaming_service

#!/usr/bin/env python3
# -*- coding: utf-8 -*-
# Filename: cve_2023_29360_streaming_service.py
# Version: 1.0.0
# Author: Jeoi Reqi
# Vulnerability Source: https://nvd.nist.gov/vuln/detail/CVE-2023-29360

"""
Description:
This script checks for the presence of vulnerable configurations related to the CVE-2023-29360 vulnerability
on the user's machine. It retrieves a list of installed software using the WMI module and compares it with
a predefined list of vulnerable configurations associated with the CVE. If any vulnerable configurations
are found, it displays a warning message to prompt the user to take immediate action to mitigate the vulnerability.

Requirements:
- Python 3.x: The script is written in Python 3 and requires a Python interpreter of version 3 or higher to run.
- WMI Module: The script uses the WMI module to interact with the Windows Management Instrumentation (WMI) API
  to retrieve a list of installed software on a Windows system. Ensure that the WMI module is installed.
  You can install it using pip: `pip install WMI`.

Usage:
1. Ensure Python 3.x is installed on your system.
2. Install the WMI module by running `pip install WMI`.
3. Run the script using the command `python cve_2023_29360_streaming_service.py`.
4. The script will verify if any vulnerable configurations are installed on your machine
   and provide instructions for mitigation if necessary.

Functions:
- get_installed_software(): Retrieves a list of installed software on the user's machine using the WMI module.
- check_for_vulnerabilities(): Compares the list of installed software with a predefined list of vulnerable
  configurations and displays a warning message if any vulnerable configurations are found.

Important Notes:
- The predefined list of vulnerable configurations in this script corresponds to the CVE-2023-29360 vulnerability.
"""

import wmi

def get_installed_software():
    """
    Retrieves a list of installed software on the user's machine using the WMI module.

    Returns:
        list: A list containing the names of installed software.
    """
    c = wmi.WMI()
    installed_software = []
    for item in c.Win32_Product():
        installed_software.append(item.Caption)
    return installed_software

def check_for_vulnerabilities():
    """
    Compares the list of installed software with a predefined list of vulnerable configurations
    and displays a warning message if any vulnerable configurations are found.
    """
    installed_software = get_installed_software()
    vulnerable_versions = [
        "Microsoft Windows 10 1607 x64 up to (excluding) 10.0.14393.5989",
        "Microsoft Windows 10 1607 x86 up to (excluding) 10.0.14393.5989",
        "Microsoft Windows 10 1809 arm64 up to (excluding) 10.0.17763.4499",
        "Microsoft Windows 10 1809 x64 up to (excluding) 10.0.17763.4499",
        "Microsoft Windows 10 1809 x86 up to (excluding) 10.0.17763.4499",
        "Microsoft Windows 10 21H2 arm64 up to (excluding) 10.0.19044.3086",
        "Microsoft Windows 10 21H2 x64 up to (excluding) 10.0.19044.3086",
        "Microsoft Windows 10 21H2 x86 up to (excluding) 10.0.19044.3086",
        "Microsoft Windows 10 22H2 arm64 up to (excluding) 10.0.19045.3086",
        "Microsoft Windows 10 22H2 x64 up to (excluding) 10.0.19045.3086",
        "Microsoft Windows 10 22H2 x86 up to (excluding) 10.0.19045.3086",
        "Microsoft Windows 11 21H2 arm64 up to (excluding) 10.0.22000.2057",
        "Microsoft Windows 11 21H2 x64 up to (excluding) 10.0.22000.2057",
        "Microsoft Windows 11 22H2 arm64 up to (including) 10.0.22621.1848",
        "Microsoft Windows 11 22H2 x64 up to (including) 10.0.22621.1848",
        "Microsoft Windows Server 2016 up to (excluding) 10.0.14393.5989",
        "Microsoft Windows Server 2019 up to (excluding) 10.0.17763.4499",
        "Microsoft Windows Server 2022 up to (excluding) 10.0.20348.1784"
    ]
    vulnerable_installed = [software for software in installed_software if software in vulnerable_versions]
    if vulnerable_installed:
        print("\nWarning:\nThe following vulnerable configurations are installed on your machine:")
        for software in vulnerable_installed:
            print("- " + software)
        print("\nPlease take immediate action to mitigate the vulnerability by applying updates per vendor instructions or discontinuing use of the product if mitigations are unavailable.\n")
    else:
        print("\nAll clear!\nNone of the vulnerable configurations are installed on your machine.\n")

if __name__ == "__main__":
    print("Verifying vulnerable configurations...")
    check_for_vulnerabilities()