CVE-2022-27255 PoC — Realtek AP-Router SDK 输入验证错误漏洞

Source

https://github.com/stryker-project/CVE-2022-27255-checker

Associated Vulnerability

Title:Realtek AP-Router SDK 输入验证错误漏洞 (CVE-2022-27255)
Description:In Realtek eCos RSDK 1.5.7p1 and MSDK 4.9.4p1, the SIP ALG function that rewrites SDP data has a stack-based buffer overflow. This allows an attacker to remotely execute code without authentication via a crafted SIP packet that contains malicious SDP data.

Description

Simple checker for CVE-2022-27255 using poc_crash and telnet availability

Readme

# CVE-2022-27255-checker
Simple checker for CVE-2022-27255 using poc_crash and telnet availability. Code is simplified and using minimal external libs

Usage: checker.py <server ip> <port>

Original: https://github.com/infobyte/cve-2022-27255/blob/main/exploits_nexxt/poc_crash.py

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →

Goal Reached Thanks to every supporter — we hit 100%!