vulnerability

Huawei EulerOS: CVE-2018-1000500: busybox security update

Severity
7
CVSS
(AV:N/AC:M/Au:N/C:P/I:P/A:P)
Published
Jun 26, 2018
Added
Mar 24, 2020
Modified
Aug 13, 2025

Description

Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file".

Solution

huawei-euleros-2_0_sp8-upgrade-busybox
Title
NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.