A security issue exists in D-Link D-View 8 v2

#!/usr/bin/env python3
# check_dview8_cve_2023_7163.py
# Detect likely exposure to CVE-2023-7163 on D-Link D-View 8.
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN, 3=ERROR

import os
import platform
import re
import subprocess
import sys

THRESHOLD = "2.0.2.89"
NAME_PATTERNS = ["d-view 8", "dview 8", "d-link d-view 8", "dlink d-view 8"]


def normalize_version(v):
    nums = [int(x) for x in re.findall(r"\d+", v or "")]
    if not nums:
        return None
    return nums


def compare_versions(a, b):
    va = normalize_version(a)
    vb = normalize_version(b)
    if va is None or vb is None:
        return None
    maxlen = max(len(va), len(vb))
    va += [0] * (maxlen - len(va))
    vb += [0] * (maxlen - len(vb))
    if va < vb:
        return -1
    if va > vb:
        return 1
    return 0


def looks_like_target(name):
    n = (name or "").strip().lower()
    return any(p in n for p in NAME_PATTERNS)


def query_windows_registry():
    try:
        import winreg
    except Exception:
        return []

    results = []
    hives = [winreg.HKEY_LOCAL_MACHINE, winreg.HKEY_CURRENT_USER]
    paths = [
        r"SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall",
        r"SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall",
    ]

    for hive in hives:
        for path in paths:
            try:
                key = winreg.OpenKey(hive, path)
            except OSError:
                continue
            try:
                count = winreg.QueryInfoKey(key)[0]
                for i in range(count):
                    try:
                        subname = winreg.EnumKey(key, i)
                        subkey = winreg.OpenKey(key, subname)
                        display_name = None
                        display_version = None
                        try:
                            display_name = winreg.QueryValueEx(subkey, "DisplayName")[0]
                        except OSError:
                            pass
                        try:
                            display_version = winreg.QueryValueEx(subkey, "DisplayVersion")[0]
                        except OSError:
                            pass
                        if looks_like_target(display_name):
                            results.append((display_name, display_version, "registry"))
                    except OSError:
                        continue
            finally:
                try:
                    winreg.CloseKey(key)
                except Exception:
                    pass
    return results


def run_cmd(cmd):
    try:
        cp = subprocess.run(cmd, stdout=subprocess.PIPE, stderr=subprocess.PIPE, text=True, check=False)
        return cp.returncode, cp.stdout, cp.stderr
    except Exception as e:
        return 127, "", str(e)


def query_linux_packages():
    results = []

    rc, out, _ = run_cmd(["dpkg-query", "-W", "-f=${Package}\t${Version}\n"])
    if rc == 0:
        for line in out.splitlines():
            parts = line.split("\t", 1)
            if len(parts) != 2:
                continue
            pkg, ver = parts
            if looks_like_target(pkg) or "dview" in pkg.lower() or "d-view" in pkg.lower():
                results.append((pkg, ver, "dpkg"))

    rc, out, _ = run_cmd(["rpm", "-qa", "--qf", "%{NAME}\t%{VERSION}-%{RELEASE}\n"])
    if rc == 0:
        for line in out.splitlines():
            parts = line.split("\t", 1)
            if len(parts) != 2:
                continue
            pkg, ver = parts
            if looks_like_target(pkg) or "dview" in pkg.lower() or "d-view" in pkg.lower():
                results.append((pkg, ver, "rpm"))

    return results


def dedupe(results):
    seen = set()
    clean = []
    for item in results:
        if item not in seen:
            seen.add(item)
            clean.append(item)
    return clean


def choose_best(results):
    versionish = []
    for name, ver, source in results:
        if normalize_version(ver):
            versionish.append((name, ver, source))
    return versionish[0] if versionish else None


def main():
    system = platform.system().lower()
    findings = []

    if "windows" in system:
        findings.extend(query_windows_registry())
    else:
        findings.extend(query_linux_packages())

    findings = dedupe(findings)
    best = choose_best(findings)

    if not findings:
        print("UNKNOWN: D-Link D-View 8 not found via local registry/package metadata")
        sys.exit(2)

    if best is None:
        printable = "; ".join([f"{n} [{s}] version={v}" for n, v, s in findings])
        print(f"UNKNOWN: D-Link D-View 8 found but version not parseable: {printable}")
        sys.exit(2)

    name, ver, source = best
    cmpv = compare_versions(ver, THRESHOLD)
    if cmpv is None:
        print(f"UNKNOWN: unable to compare version '{ver}' from {source}")
        sys.exit(2)

    if cmpv <= 0:
        print(f"VULNERABLE: {name} version {ver} from {source} is <= {THRESHOLD}")
        sys.exit(1)
    else:
        print(f"PATCHED: {name} version {ver} from {source} is > {THRESHOLD}")
        sys.exit(0)


if __name__ == "__main__":
    try:
        main()
    except Exception as e:
        print(f"UNKNOWN: error during detection: {e}")
        sys.exit(3)