ZDI-CAN-27556
MEDIUM 6.1
Overdue
Oct 03, 2025
BusyBox
BusyBox is a widely-used lightweight Unix utility suite commonly embedded in Linux distributions, IoT devices, and embedded systems. This medium-severity vulnerability (CVSS 6.1) requires local access and user interaction to exploit, but causes integrity damage and some availability loss without needing authentication. Security teams should monitor for patches from their BusyBox deployments and assess exposure across embedded and IoT infrastructure, as this software has extensive distribution in production environments.
Advisory Details
Researcher
Discovered by:
Ryota Shiga (GMO Flatt Security Inc.) with takumi-san.ai
Reported
October 03, 2025
Deadline
January 31, 2026
75d overdue
CVSS Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L