BlackTreeIndependent security intelligence

Full vulnerability report · 2023

CVE-2022-48174High confidence

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35

n/a · n/a

9.8CriticalCVSS 3.1

Recommended action

Within 72 hours

Critical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.

Patch available

Distribution package intelligence

Ubuntu vendor package status

Canonical’s release and source-package findings are shown separately from local repository availability.

1 package state

Repository candidate not checked

A published vendor fix does not prove that a matching update is enabled and installable on a particular asset. Confirm the local package candidate before scheduling remediation.

Ubuntu release	Source package	Vendor state	Fixed version	Evidence
Ubuntu 24.04 LTSnoble · standard archive	`busybox`	Vendor fix publishedCanonical reports that a fixed source package version has been published. Repository candidate availability is not checked by BlackTree.	`1:1.36.1-6ubuntu3.1`	Canonical record ↗Source updated 9 Sept 2026

Direct vendor intelligence

Authoritative vendor CSAF and VEX advisories

Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.

2 current

SSA-585531 · CSAF 2.0 · revision 1 · interimSiemens ProductCERTSSA-585531: Multiple Vulnerabilities in SIDIS Secured SmartPlug before V7.26.0310

1 known affected

The vendor explicitly identifies these products as affected by this CVE.

SIDIS Secured SmartPlug < V7.26.0310

Summary: There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
Remediation: Update to V7.26.0310 or later version

SSA-089022 · CSAF 2.0 · revision 2 · interimSiemens ProductCERTSSA-089022: Multiple Vulnerabilities in Third-Party Components in SINEC OS before V3.3

16 known affected

The vendor explicitly identifies these products as affected by this CVE.

RUGGEDCOM RST2428P (6GK6242-6PA00)
SCALANCE XC-300/XR-300/XC-400/XR-500WG/XR-500 family
SCALANCE XCH328 (6GK5328-4TS01-2EC2)
SCALANCE XCM324 (6GK5324-8TS01-2AC2)
SCALANCE XCM328 (6GK5328-4TS01-2AC2)
SCALANCE XCM332 (6GK5332-0GA01-2AC2)
SCALANCE XRH334 (24 V DC, 8xFO, CC) (6GK5334-2TS01-2ER3)
SCALANCE XRM334 (230 V AC, 12xFO) (6GK5334-3TS01-3AR3)
SCALANCE XRM334 (230 V AC, 8xFO) (6GK5334-2TS01-3AR3)
SCALANCE XRM334 (230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-3AR3)
SCALANCE XRM334 (24 V DC, 12xFO) (6GK5334-3TS01-2AR3)
SCALANCE XRM334 (24 V DC, 8xFO) (6GK5334-2TS01-2AR3)

Summary: There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.
Remediation: Update to V3.3 or later version

Official European source

ENISA European Vulnerability Database

Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.

1 current

ENISA EUVD identifier

EUVD-2022-50885

No EUVD known-exploited evidence

ENISA has published the identifier mapping but no EUVD description has been stored yet.

EUVD state: Present in the current official mapping
Known exploitation: Not present in the current ENISA EUVD known-exploited dataset. This is not proof of no exploitation.
ENISA score: Not supplied in the stored EUVD record
Advisory evidence: No linked advisory details stored yet

Recommended actionWithin 72 hours

Critical technical impact with a remotely reachable, unauthenticated path; no CISA KEV confirmation is currently recorded.

Patch available

What, why and how

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

What

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

Why

A bounds error lets data be written beyond the intended memory region, potentially corrupting control data.

How

An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may execute code or commands in the affected security context.

What

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

Why

A bounds error lets data be written beyond the intended memory region, potentially corrupting control data.

How

Exploit reality and attack path

CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.

Observed exploitation

Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.

No confirmed evidence

No CISA KEV match was present at the last successful refresh. This means no confirmation from that source, not proof of no exploitation.

Public PoC / exploit material

Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.

None recorded

No exploit-tagged reference or CISA SSVC proof-of-concept state is currently recorded. Research may still exist outside the structured feeds.

Likely attack path: a network path → Out-of-bounds Write → execute code or commands in the affected security context
Attack surface: Network
Privileges required: None: unauthenticated exploitation is possible
User interaction: None
Attack complexity: Low: no specialised conditions are recorded
Security boundary: Unchanged: impact remains within the vulnerable component's security authority
Weakness ? CWE means Common Weakness Enumeration: a standard category for the underlying weakness.: CWE-787 ↗
CWE-787: Out-of-bounds Write. The product writes data past the end, or before the beginning, of the intended buffer.
CVSS vector ? CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Common Vulnerability Scoring System 3.1: the compact vector below is decoded into plain language.
AVNetworkAttack vector: The vulnerable component can be reached over a network.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.PRNonePrivileges required: The attacker does not need an account or existing privileges.UINoneUser interaction: No action by another user is required.SUnchangedScope: The security impact remains within the vulnerable component's authority.CHighConfidentiality impact: A successful attack can cause a major loss.IHighIntegrity impact: A successful attack can cause a major loss.AHighAvailability impact: A successful attack can cause a major loss.
Post-exploitation / living off the land: After compromise, an attacker may use built-in shells, scripting engines, scheduled tasks and native network utilities for discovery, persistence or movement. This is a plausible LoTL path, not evidence that it has occurred for every attack.

NetworkUnauthenticatedRemote code executionCWE-787

Official authority intelligence

Only matched European and national findings are included. Language selectors and unavailable sources are omitted.

ENISA EUVD · EUVD-2022-50885Official EUVD mapping

0 linked advisory records.

Official EUVD record

BSI · German · WID-SEC-W-2024-1642Oracle Communications: Mehrere Schwachstellen

Ein entfernter, anonymer oder authentisierter Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Official advisory

BSI · German · WID-SEC-W-2024-0106Oracle Communications: Mehrere Schwachstellen

Ein entfernter, anonymer Angreifer kann mehrere Schwachstellen in Oracle Communications ausnutzen, um die Vertraulichkeit, Integrität und Verfügbarkeit zu gefährden.

Official advisory

BSI · German · WID-SEC-W-2023-2115BusyBox: Schwachstelle ermöglicht Codeausführung

Ein lokaler Angreifer kann eine Schwachstelle in BusyBox ausnutzen, um beliebigen Programmcode auszuführen.

Official advisory

CERT-FR · French · CERTFR-2026-AVI-0209Multiples vulnérabilités dans les produits VMware

x/support-content-notification/-/external/content/SecurityAdvisories/0/37073 Bulletin de sécurité VMware 37074 du 25 février 2026 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37074 Bulletin de sécurité VMware 37075 du 25 février 2026 https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/37075 Référence CVE CVE-2016-9843 https://www.cve.org/CVERecord?id=CVE-2016-9843 Référence CVE CVE-2021-46848 https://www.cve.org/CVERecord?id=CVE-2021-46848 Référence CVE CVE-2022-41727 https://www.cve.org/CVERecord?id=CVE-2022-41727 Référence CVE CVE-2022-48174 https://www.cve.org/CVERecord?id=CVE-2022-48174 Référence CVE CVE-2023-29407 https://www.cve.org/CVERecord?id=CVE-2023-29407 Référence CVE CVE-2023-29408 https://www.cve.org/CVERecord?id=CVE-2023-29408 Référence CVE CVE-2023-42363 https://www.cve.org/CVERecord?id=CVE-2023-42363 Référence CVE CVE-2023-42364 https://www.cve.org/CVERecord?id=CVE-2023-42364 Référence CVE CVE-2023-42365 https://www.cve.org/CVERecord?id=CVE-2023-42365 Référence CVE CVE-2023-42366 https://www.cve.org/CVERecord?id=CVE-2023-42366 Référence CVE CVE-2024-24557 https://www.cve.org/CVERecord?id=CVE-2024-24557 Référence CVE CVE-2024-24792 https://www.cve.org/CVERecord?id=

Official advisory

CERT-FR · French · CERTFR-2026-AVI-0199Multiples vulnérabilités dans les produits VMware

ERecord?id=CVE-2022-42003 Référence CVE CVE-2022-42004 https://www.cve.org/CVERecord?id=CVE-2022-42004 Référence CVE CVE-2022-4203 https://www.cve.org/CVERecord?id=CVE-2022-4203 Référence CVE CVE-2022-42915 https://www.cve.org/CVERecord?id=CVE-2022-42915 Référence CVE CVE-2022-42916 https://www.cve.org/CVERecord?id=CVE-2022-42916 Référence CVE CVE-2022-4304 https://www.cve.org/CVERecord?id=CVE-2022-4304 Référence CVE CVE-2022-43551 https://www.cve.org/CVERecord?id=CVE-2022-43551 Référence CVE CVE-2022-43552 https://www.cve.org/CVERecord?id=CVE-2022-43552 Référence CVE CVE-2022-4450 https://www.cve.org/CVERecord?id=CVE-2022-4450 Référence CVE CVE-2022-48174 https://www.cve.org/CVERecord?id=CVE-2022-48174 Référence CVE CVE-2023-0215 https://www.cve.org/CVERecord?id=CVE-2023-0215 Référence CVE CVE-2023-0216 https://www.cve.org/CVERecord?id=CVE-2023-0216 Référence CVE CVE-2023-0217 https://www.cve.org/CVERecord?id=CVE-2023-0217 Référence CVE CVE-2023-0286 https://www.cve.org/CVERecord?id=CVE-2023-0286 Référence CVE CVE-2023-0401 https://www.cve.org/CVERecord?id=CVE-2023-0401 Référence CVE CVE-2023-0464 https://www.cve.org/CVERecord?id=CVE-2023-0464 Référence CVE CVE-2023-0465 https://www.cve.org/CVERecord?id=CVE-2023-0465 Référence CVE CVE-2023-0466 https://www.cve.org/CVERecord?id=CVE-2023-0466 R

Official advisory

CERT-FR · French · CERTFR-2026-AVI-0101Multiples vulnérabilités dans les produits Siemens

versions antérieures à 3.3 SCALANCE XRM334 (2x230V AC, 2x10G, 24xSFP, 8xSFP+) (6GK5334-5TS01-4AR3) versions antérieures à 3.3 Résumé De multiples vulnérabilités ont été découvertes dans les produits Siemens. Certaines d'entre elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance, une élévation de privilèges et un déni de service à distance. Solutions Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation). Documentation Bulletin de sécurité Siemens SSA-089022 du 28 janvier 2026 https://cert-portal.siemens.com/productcert/html/ssa-089022.html Référence CVE CVE-2022-48174 https://www.cve.org/CVERecord?id=CVE-2022-48174 Référence CVE CVE-2023-39810 https://www.cve.org/CVERecord?id=CVE-2023-39810 Référence CVE CVE-2023-42363 https://www.cve.org/CVERecord?id=CVE-2023-42363 Référence CVE CVE-2023-42364 https://www.cve.org/CVERecord?id=CVE-2023-42364 Référence CVE CVE-2023-42365 https://www.cve.org/CVERecord?id=CVE-2023-42365 Référence CVE CVE-2023-42366 https://www.cve.org/CVERecord?id=CVE-2023-42366 Référence CVE CVE-2023-7256 https://www.cve.org/CVERecord?id=CVE-2023-7256 Référence CVE CVE-2024-11053 https://www.cve.org/CVERecord?id=CVE-2024-11053 Référence CVE CVE-2024-12718 https://www.cve.org/CVERecord?id=CV

Official advisory

NCSC-NL · Dutch · NCSC-2026-0229Kwetsbaarheden verholpen in Siemens producten

A critical stack overflow vulnerability in BusyBox's ash.c prior to version 1.35 allows unauthenticated remote code execution, affecting Oracle Communications Cloud Native Core Network Function and multiple NetApp products with a CVSS score of 9.8.

Official advisory

NCSC-NL · Dutch · NCSC-2024-0294Kwetsbaarheden verholpen in Oracle Communications

Een kwaadwillende kan de kwetsbaarheden misbruiken om aanvallen uit te voeren die kunnen leiden tot de volgende categorieën schade: * Denial-of-Service (DoS) * Toegang tot gevoelige gegevens * Toegang tot systeemgegevens * Manipulatie van gegevens * (Remote) code execution (Gebruikersrechten)

Official advisory

Patch and workaround

Operational remediation based on structured source evidence.

Status ? Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.: Patch available
Affected: SIDIS Secured SmartPlug < V7.26.0310
Fixed: No fixed version is explicitly recorded in the structured CVE data.
Action: Update to V7.26.0310 or later version
Workaround: No verified workaround is recorded. If business-safe, reduce exposure to the affected interface and allow only trusted sources until authoritative guidance is available.

Evidence and provenance

Published 22 Aug 2023 · Last source change 14 Jul 2026, 11:54 UTC · CWE-787 · Out-of-bounds Write

CVE recordCVE.org · 5.2

CVSS sourceNIST NVD

EPSS source

The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.

FIRST · tracked since 2026-08-14

European sourceENISA EUVD · EUVD-2022-50885

Product sourceVendor CSAF · Siemens ProductCERT

Remediation sourceVendor CSAF · Siemens ProductCERT

CWE sourceNIST NVD

NVD statusNVD modified after enrichment

Core structured fields are present and their contributing authorities are shown above.

Material change intelligence

What changed after publication

View recent updates →

No material field changes have been recorded since change tracking began. Routine source refreshes and cosmetic edits are intentionally excluded.

2023-08-22CVE published

ENISA EUVD · EUVD-2022-50885↗Vendor CSAF · Siemens ProductCERT↗CVE authority or vendor reference↗Official CVE record (CNA and ADP data)↗NVD record↗

Technical terms and abbreviations used in this report

CVE: Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS: Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS: Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE: Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA: CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP: Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD: National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT: A computer security incident response team that publishes warnings or coordinates incident response.
PoC: Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF: Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL: Living off the land: abuse of legitimate tools or system functions during an attack.

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35

National CERT insights ?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.

EUVD-2022-50885

What, why and how

Exploit reality and attack path

Official authority intelligence

Patch and workaround

Evidence and provenance

National CERT insights
?
CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.