CVE-2022-48174

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution...

CVE-2022-48174

CVE-2022-48174 is a stack overflow in BusyBox ash.c:6030 affecting versions before 1.35. In Internet of Vehicles contexts this can enable arbitrary code execution from a crafted input command. Public details confirm the vulnerability in BusyBox prior to 1.35 and indicate exposure in IoT environme...

Amazon Linux AMI : busybox (ALAS-2023-1786)

The version of busybox installed on the remote host is prior to 1.34.1-1.15. It is, therefore, affected by a vulnerability as referenced in the ALAS-2023-1786 advisory. A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted...

Medium: busybox

Issue Overview: A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function. CVE-2022-30065 Affected Packages: busybox Issue Correction: Run yum update busybox or yum update --advisory...

The vulnerability of the copyvar function in the UNIX utility command-line tool BusyBox allows a hacker to gain access to confidential data, compromise its integrity, and cause service failures.

The vulnerability of the copyvar function in the UNIX utility command-line tool BusyBox is related to incorrect handling of the created awk template. Exploiting this vulnerability allows a remote attacker to gain access to confidential data, compromise its integrity, and cause service failures...

Siemens SCALANCE XCM332 Use After Free (CVE-2022-30065)

A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVE...

Siemens SCALANCE XCM332

As of January 10, 2023, CISA will no longer be updating ICS security advisories for Siemens product vulnerabilities beyond the initial advisory. For the most up-to-date information on vulnerabilities in this advisory, please seeSiemens' ProductCERT Security Advisories CERT Services | Services |...

ASKEY RTF3505VW-N1 - Privilege Escalation

Exploit Title: ASKEY RTF3505VW-N1 - Privilege escalation Date: 07-12-2022 Exploit Author: Leonardo Nicolas Servalli Vendor Homepage: www.askey.com Platform: ASKEY router devices RTF3505VW-N1 Tested on: Firmware BRSVg000R3505VMN1001s327 Vulnerability analysis:...

ASKEY RTF3505VW-N1 - Privilege Escalation Exploit

Exploit Title: ASKEY RTF3505VW-N1 - Privilege escalation Exploit Author: Leonardo Nicolas Servalli Vendor Homepage: www.askey.com Platform: ASKEY router devices RTF3505VW-N1 Tested on: Firmware BRSVg000R3505VMN1001s327 Vulnerability analysis:...

MiniDVBLinux 5.4 - Change Root Password

Exploit Title: MiniDVBLinux 5.4 - Change Root Password Exploit Author: LiquidWorm MiniDVBLinux 5.4 Change Root Password PoC Vendor: MiniDVBLinux Product web page: https://www.minidvblinux.de Affected version: =5.4 Summary: MiniDVBLinuxTM Distribution MLD. MLD offers a simple way to convert a...

MiniDVBLinux 5.4 - Arbitrary File Read

Exploit Title: MiniDVBLinux 5.4 - Arbitrary File Read Exploit Author: LiquidWorm !/usr/bin/env python3 MiniDVBLinux 5.4 Arbitrary File Read Vulnerability Vendor: MiniDVBLinux Product web page: https://www.minidvblinux.de Affected version: =5.4 Summary: MiniDVBLinuxTM Distribution MLD. MLD offers ...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42384)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42384 advisory. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42385)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42385 advisory. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when...

CBL Mariner 2.0 Security Update: busybox (CVE-2022-28391)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-28391 advisory. - BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42379)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42379 advisory. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42381)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42381 advisory. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42374)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42374 advisory. - An out-of-bounds heap read in Busybox's unlzma applet leads to information leak and denial of service when...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42382)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42382 advisory. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42386)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42386 advisory. - A use-after-free in Busybox's awk applet leads to denial of service and possibly code execution when...

CBL Mariner 2.0 Security Update: busybox (CVE-2021-42376)

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2021-42376 advisory. - A NULL pointer dereference in Busybox's hush applet leads to denial of service when processing a crafted...