CVE-2025-12220

CVE-2025-12220

Critical · published October 25, 2025

CVSS v3.1
9.8
EPSS
0%
Percentile
29.7
In the wild
Unconfirmed
What it is

🔥 Busybox 1.31.1 has a crucial set of flaws that could leave your systems wide open! Think of it as a restaurant kitchen where multiple chefs are allowed to enter without proper checks—anyone could mix up the ingredients or even turn off the stoves, causing chaos! These vulnerabilities could allow unauthorized users to access sensitive data and cause untold damage to your system—imagine a thief walking into your restaurant and taking anything they want, without anyone stopping them! This could lead to data loss, service disruption, and serious reputational harm.

Put simply

Think of it as a restaurant kitchen where multiple chefs are allowed to enter without proper checks—anyone could mix up the ingredients or even turn off the stoves, causing chaos! Several security flaws in Busybox versions through 1.19.5 could lead to unauthorized access and potential system manipulation, making it a dream scenario for any malicious actor looking to exploit weaknesses.

What to do

These vulnerabilities could allow unauthorized users to access sensitive data and cause untold damage to your system—imagine a thief walking into your restaurant and taking anything they want, without anyone stopping them! This could lead to data loss, service disruption, and serious reputational harm. Immediately patch Busybox to version 1.31.2 or later to close these vulnerabilities. Review your systems for any associated risks and ensure that appropriate security measures are in place to prevent unauthorized access. You've got this! Patch up those vulnerabilities and keep your systems safe as a fortress! 🛡️

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00369 · 29.7th percentile
Published
2025-10-25T20:15Z
Affected products (2)
ProductVersionsFixed in
azure-access/blu-ic2_firmware< 1.201.20
azure-access/blu-ic4_firmware< 1.201.20
References (1)
EPSS history
Timeline
  • 25 OCT 15:53Z
    Busybox 1.31.1 - Multiple Known Vulnerabilities
    cvelistv5