CVE-2022-48174Disclosure(busybox / busybox)

LOWCVSS 9.8 · CRITICAL

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-787

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • busybox
  • debian_linux

Threat summary

  • 1 mentions across 1 observed day

What's happening

  • Disclosure: 1 classified signal
  • 1 total mentions across 1 day

Affected systems

Products
busyboxdebian_linux

1 version affected across 2 products

Deep dive

Activity timeline1 mentions / 1d
00111Mentions · 2026-07-22: 107-22
Signal classification1 categories
Disclosure
1100.0%
Referenced assets1 URL
Full discourse1 post
  • BREACHSPIDER@breachspider
    Disclosure

    [CVE Analysis] CVE-2022-48174: Siemens SIDIS Secured SmartPlug Inherits Critical Third-Party Package Flaws https://breachspider.com/intel/2026-07-22-cve-2022-48174-siemens-sidis-secured-smartplug-inherits-crit #ICS #OTSecurity #SCADA #CriticalInfrastructure

    Post summary

    The tweet announces a CVE‑analysis of Siemens SIDIS Secure SmartPlug, highlighting inherited third‑party package flaws but offering no evidence of exploitation, fixes, or detailed technical specifics.

    0000051
    2.3K followersView on X
CPE platform detail2 entries

2 of 2 entries

PartVendorProductVersionTarget SWTarget HW
Appbusyboxbusybox---
OSdebiandebian_linux11.0--

Explore more