Stack Overflow Vulnerability in ash.c:6030 in BusyBox (Before 1.35) Enables Arbitrary Code Execution in Internet of Vehicles Environment

CVE-2022-48174 · CRITICAL Severity

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.

Learn more about our Web Application Penetration Testing UK.