ZDI-CAN-27556 MEDIUM 6.1 Overdue Oct 03, 2025

BusyBox

BusyBox is a widely-used lightweight Unix utility suite commonly embedded in Linux distributions, IoT devices, and embedded systems. This medium-severity vulnerability (CVSS 6.1) requires local access and user interaction to exploit, but causes integrity damage and some availability loss without needing authentication. Security teams should monitor for patches from their BusyBox deployments and assess exposure across embedded and IoT infrastructure, as this software has extensive distribution in production environments.

Advisory Details
Researcher Discovered by: Ryota Shiga (GMO Flatt Security Inc.) with takumi-san.ai
Reported October 03, 2025
Deadline January 31, 2026 75d overdue
CVSS Vector AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy