According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS     PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the     terminal's colors. (CVE-2022-28391)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

リモートホストにインストールされている busybox のバージョンは、1.34.1-1.14 より前です。したがって、ALAS-2022-1608 のアドバイザリに記載されている脆弱性の影響を受けます。

  - 1.35.0 までの BusyBox により、netstat を使用して DNS PTR レコードの値を VT 互換端末に出力する場合、リモート攻撃者が任意のコードを実行する可能性があります。あるいは、攻撃者がターミナルの色を変更するように選択する可能性があります。(CVE-2022-28391)

Nessus はこの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

遠端主機上安裝的 busybox 版本為 1.34.1-1.14 之前版本。因此，會受到 ALAS-2022-1608 公告中提及的一個弱點影響。

  - 在 BusyBox 1.35.0 以及之前版本中，如果使用 netstat 將 DNS PTR 記錄的值列印至 VT 相容終端，遠端攻擊者即可執行任意程式碼。或者，攻擊者可以選擇變更終端機的色彩。(CVE-2022-28391)

請注意，Nessus 並未測試此問題，而是僅依據應用程式自我報告的版本號碼作出判斷。

远程主机上安装的 busybox 版本低于 1.34.1-1.14 版，因此，该应用程序受到 ALAS-2022-1608 公告中提及的漏洞的影响。

  - 在 BusyBox 1.35.0 及之前所有版本中，如果使用 netstat 将 DNS PTR 记录的值打印到 VT 兼容终端，远程攻击者即可执行任意代码，或者攻击者可以选择更改终端的颜色。(CVE-2022-28391)

请注意，Nessus 尚未测试此问题，而是只依据应用程序自我报告的版本号进行判断。

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2022-28391 advisory.

  - BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS     PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the     terminal's colors. (CVE-2022-28391)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of busybox installed on the remote host is prior to 1.34.1-1.14. It is, therefore, affected by a vulnerability as referenced in the ALAS-2022-1608 advisory.

    An escape sequence injection attack was found in BusyBox on Alpine. For this issue to occur, a remote     host's virtual terminal must contain an escape sequence, and the victim must then execute netstat. This     flaw allows an attacker can inject arbitrary code, leading to a loss of integrity. (CVE-2022-28391)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

BusyBox through 1.35.0 allows remote attackers to execute arbitrary code if netstat is used to print a DNS PTR record's value to a VT compatible terminal. Alternatively, the attacker could choose to change the terminal's colors.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
163562	EulerOS 2.0 SP10 : busybox (EulerOS-SA-2022-2151)	Nessus	Huawei Local Security Checks	2022/7/29	2023/10/17	high
162836	Amazon Linux AMI: busybox (ALAS-2022-1608)	Nessus	Amazon Linux Local Security Checks	2022/7/8	2024/12/11	high
162836	Amazon Linux AMI：busybox (ALAS-2022-1608)	Nessus	Amazon Linux Local Security Checks	2022/7/8	2024/12/11	high
162836	Amazon Linux AMI：busybox (ALAS-2022-1608)	Nessus	Amazon Linux Local Security Checks	2022/7/8	2024/12/11	high
172995	CBL Mariner 2.0 Security Update: busybox (CVE-2022-28391)	Nessus	MarinerOS Local Security Checks	2023/3/20	2025/2/10	high
162885	EulerOS 2.0 SP9 : busybox (EulerOS-SA-2022-1958)	Nessus	Huawei Local Security Checks	2022/7/8	2023/10/18	high
162836	Amazon Linux AMI : busybox (ALAS-2022-1608)	Nessus	Amazon Linux Local Security Checks	2022/7/8	2024/12/11	high
162902	EulerOS 2.0 SP9 : busybox (EulerOS-SA-2022-1988)	Nessus	Huawei Local Security Checks	2022/7/8	2023/10/18	high
163531	EulerOS 2.0 SP10 : busybox (EulerOS-SA-2022-2126)	Nessus	Huawei Local Security Checks	2022/7/29	2023/10/17	high
502976	Siemens SIMATIC S7-1500 TM MFP BIOS Missing Encryption of Sensitive Data (CVE-2022-28391)	Tenable OT Security	Tenable.ot	2025/2/25	2025/2/26	high

检测

插件搜索

high

high

high

high

high

high

high

high

high

high