Proof of Concept exploits for vulnerabilities affecting Poly VoIP devices.
A detailed security advisory, including these and other vulnerabilities in Poly VoIP devices, is available at https://modzero.com/en/advisories/mz-23-01-poly-voip/
A beginner-friendly talk about these vulnerabilities and how such vulnerabliities can be found is availabe at https://media.ccc.de/v/37c3-11919-finding_vulnerabilities_in_internet-connected_devices
# compile it yourself
cd src
gcc -Wall -o poc poc-rand.c
./poc CCX 12345678
# or use the precompiled version
cd bin
./poc-rand CCX 12345678
# compile it yourself
cd src
gcc -Wall -o poc poc-ta.c -lssl -lcrypto
./poc 123456ffffff 425813540719
# or use the precompiled version
cd bin
./poc-ta 123456ffffff 425813540719
cd demo
python3 poc.py --device TRIO8800 10.10.10.10
If you have any questions, don't hesitate to contact us directly.