CVE-2022-48174

CriticalCVSS 9.8

Published: 22/08/2023(UTC)Updated: 14/07/2026(UTC)Translated: 15/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.98%

86th percentile - higher than 86% of all known CVEs

Summary

A stack overflow vulnerability exists in ash.c:6030 in busybox before version 1.35. In the Internet of Vehicles environment, it can be exploited from command execution to arbitrary code execution.

Risk Assessment

An attacker can remotely execute arbitrary code on the vulnerable device, which in the context of connected vehicles could lead to system takeover and security compromise.

Recommendation

Immediately update busybox to version 1.35 or later, which includes a fix for this vulnerability.

Original NVD description (English source)

There is a stack overflow vulnerability in ash.c:6030 in busybox before 1.35. In the environment of Internet of Vehicles, this vulnerability can be executed from command to arbitrary code execution.