Gladinet CentreStack 하드코딩된 machineKey 사용으로 인한 원격 코드 실행(RCE) 취약점 (CVE-2025-30406) 긴급 보안 권고

# web.config 파일 경로 설정 (실제 설치 경로에 맞게 수정 필요)
$configPath = 'C:\Program Files (x86)\Gladinet CentreStack\portal\web.config'

if (Test-Path $configPath) {
    [xml]$xml = Get-Content $configPath
    $machineKeyNode = $xml.SelectSingleNode('//system.web/machineKey')
    if ($machineKeyNode) {
        # 하드코딩된 machineKey 노드 제거
        $machineKeyNode.ParentNode.RemoveChild($machineKeyNode)
        $xml.Save($configPath)
        Write-Host '[SUCCESS] Hardcoded machineKey has been successfully removed.' -ForegroundColor Green
        # IIS 서비스 재시작을 통한 변경사항 적용
        Restart-Service -Name 'W3SVC'
    } else {
        Write-Host '[INFO] No machineKey node found or already removed.' -ForegroundColor Yellow
    }
} else {
    Write-Host '[ERROR] web.config file not found at specified path.' -ForegroundColor Red
}

# CentreStack 설치 버전 및 web.config 내 machineKey 존재 여부 검사
$configPath = 'C:\Program Files (x86)\Gladinet CentreStack\portal\web.config'

Write-Host '=== CentreStack Security Audit ===' -ForegroundColor Cyan
if (Test-Path $configPath) {
    [xml]$xml = Get-Content $configPath
    $machineKey = $xml.SelectSingleNode('//system.web/machineKey')
    if ($machineKey) {
        Write-Host '[WARNING] Vulnerable hardcoded machineKey detected in web.config!' -ForegroundColor Red
        Write-Host ('ValidationKey: ' + $machineKey.validationKey) -ForegroundColor DarkYellow
    } else {
        Write-Host '[SAFE] No hardcoded machineKey found in web.config.' -ForegroundColor Green
    }
} else {
    Write-Host '[ERROR] web.config file could not be located.' -ForegroundColor Red
}