SimpleHelp remote support software v5

#!/usr/bin/env python3
# verify_simplehelp_cve_2024_57726.py
# Checks SimpleHelp exposure status for CVE-2024-57726 using /allversions.
# For 5.4.10 and 5.3.9 maintenance branches, an optional local log file can
# confirm whether vendor Patch 070125 is present.
# Exit codes: 0=PATCHED, 1=VULNERABLE, 2=UNKNOWN, 3=usage/error

import argparse
import re
import sys
from urllib import request, error

TIMEOUT = 8
PATCH_MARKER = 'Patch 070125'


def norm_base(url: str) -> str:
    url = url.strip()
    if not re.match(r'^https?://', url, re.I):
        url = 'https://' + url
    return url.rstrip('/')


def fetch_text(url: str) -> str:
    req = request.Request(url, headers={'User-Agent': 'noisgate-simplehelp-check/1.0'})
    with request.urlopen(req, timeout=TIMEOUT) as resp:
        charset = resp.headers.get_content_charset() or 'utf-8'
        return resp.read().decode(charset, errors='replace')


def get_server_header(url: str) -> str:
    req = request.Request(url, method='HEAD', headers={'User-Agent': 'noisgate-simplehelp-check/1.0'})
    with request.urlopen(req, timeout=TIMEOUT) as resp:
        return resp.headers.get('Server', '') or ''


def parse_version(text: str):
    # Matches common forms: 5.5.8, v5.5.8, Visual Version: 5.5.8
    m = re.search(r'(?i)(?:visual\s+version\s*:\s*|server\s+version\s*v?|\bv)(\d+)\.(\d+)\.(\d+)', text)
    if not m:
        m = re.search(r'\b(\d+)\.(\d+)\.(\d+)\b', text)
    if not m:
        return None
    return tuple(int(x) for x in m.groups())


def has_patch_marker(log_path: str) -> bool:
    try:
        with open(log_path, 'r', encoding='utf-8', errors='replace') as fh:
            data = fh.read()
        return PATCH_MARKER in data
    except Exception:
        return False


def assess(version, patched_maintenance: bool):
    major, minor, patch = version

    if (major, minor) == (5, 5):
        return ('PATCHED', '5.5.x detected and version is 5.5.8 or later') if patch >= 8 else ('VULNERABLE', '5.5.x detected and version is 5.5.7 or earlier')

    if (major, minor, patch) == (5, 4, 10):
        if patched_maintenance:
            return 'PATCHED', '5.4.10 detected with Patch 070125 confirmed'
        return 'UNKNOWN', '5.4.10 detected; need local log evidence of Patch 070125 to confirm fixed state'

    if (major, minor, patch) == (5, 3, 9):
        if patched_maintenance:
            return 'PATCHED', '5.3.9 detected with Patch 070125 confirmed'
        return 'UNKNOWN', '5.3.9 detected; need local log evidence of Patch 070125 to confirm fixed state'

    # Vendor guidance says 5.5.8+ is not affected. Older unsupported branches are ambiguous here.
    if (major, minor) < (5, 3):
        return 'VULNERABLE', 'older branch detected; vendor advisory says 5.5.7 and all earlier releases are vulnerable'

    # 5.4.0-5.4.9 and 5.3.0-5.3.8 are earlier than the patched maintenance releases.
    if (major, minor) == (5, 4) and patch < 10:
        return 'VULNERABLE', '5.4.x detected below 5.4.10 maintenance fix'
    if (major, minor) == (5, 3) and patch < 9:
        return 'VULNERABLE', '5.3.x detected below 5.3.9 maintenance fix'

    if (major, minor) > (5, 5):
        return 'PATCHED', 'newer than affected release family'

    return 'UNKNOWN', 'version parsed, but fixed-state mapping is not definitive for this branch'


def main():
    ap = argparse.ArgumentParser(description='Verify likely exposure to CVE-2024-57726 on a SimpleHelp server')
    ap.add_argument('target', help='Base URL, e.g. https://simplehelp.example.com')
    ap.add_argument('--log', help='Optional local server log path to confirm Patch 070125 on 5.4.10/5.3.9')
    args = ap.parse_args()

    base = norm_base(args.target)
    allversions_url = base + '/allversions'

    text_sources = []
    server_header = ''

    try:
        av = fetch_text(allversions_url)
        text_sources.append(av)
    except Exception as e:
        text_sources.append('')

    try:
        server_header = get_server_header(base)
        text_sources.append(server_header)
    except Exception:
        pass

    combined = '\n'.join([t for t in text_sources if t])
    version = parse_version(combined)

    patched_maintenance = has_patch_marker(args.log) if args.log else False

    if version is None:
        print('UNKNOWN - Could not determine SimpleHelp version from /allversions or Server header')
        sys.exit(2)

    verdict, reason = assess(version, patched_maintenance)
    print(f'{verdict} - Detected version {version[0]}.{version[1]}.{version[2]} - {reason}')

    if verdict == 'PATCHED':
        sys.exit(0)
    if verdict == 'VULNERABLE':
        sys.exit(1)
    sys.exit(2)


if __name__ == '__main__':
    try:
        main()
    except KeyboardInterrupt:
        print('UNKNOWN - Interrupted')
        sys.exit(2)
    except Exception as exc:
        print(f'UNKNOWN - Error: {exc}')
        sys.exit(3)