{"id":"CVE-2022-30065","title":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","summary":"A use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.","severity":"high","cvss":7.8,"cvssVector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H","cwe":["CWE-416","CWE-416"],"vendor":"busybox","product":"busybox","affected":["busybox = 1.35.0","scalance_sc622-2c_firmware < 3.0","scalance_sc626-2c_firmware < 3.0","scalance_sc632-2c_firmware < 3.0","scalance_sc636-2c_firmware < 3.0","scalance_sc642-2c_firmware < 3.0","scalance_sc646-2c_firmware < 3.0"],"patched":["scalance_sc622-2c_firmware 3.0","scalance_sc626-2c_firmware 3.0","scalance_sc632-2c_firmware 3.0","scalance_sc636-2c_firmware 3.0","scalance_sc642-2c_firmware 3.0","scalance_sc646-2c_firmware 3.0"],"published":"2022-05-18","updated":"2026-07-07","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2022-30065","references":[{"url":"https://bugs.busybox.net/show_bug.cgi?id=14781","label":"cve@mitre.org"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf","label":"cve@mitre.org"},{"url":"https://bugs.busybox.net/show_bug.cgi?id=14781","label":"af854a3a-2127-422b-91ae-364da2661108"},{"url":"https://cert-portal.siemens.com/productcert/pdf/ssa-333517.pdf","label":"af854a3a-2127-422b-91ae-364da2661108"}],"tags":["nvd"],"epss":0.01254,"epssPercentile":0.68171,"ingestedAt":"2026-07-07T19:42:41.416Z","slug":"CVE-2022-30065","body":"## Overview\n\nA use-after-free in Busybox 1.35-x's awk applet leads to denial of service and possibly code execution when processing a crafted awk pattern in the copyvar function.\n\n## Affected\n\n- `busybox = 1.35.0`\n- `scalance_sc622-2c_firmware < 3.0`\n- `scalance_sc626-2c_firmware < 3.0`\n- `scalance_sc632-2c_firmware < 3.0`\n- `scalance_sc636-2c_firmware < 3.0`\n- `scalance_sc642-2c_firmware < 3.0`\n- `scalance_sc646-2c_firmware < 3.0`\n\n## Remediation\n\nUpgrade past the affected range:\n\n- `scalance_sc622-2c_firmware 3.0`\n- `scalance_sc626-2c_firmware 3.0`\n- `scalance_sc632-2c_firmware 3.0`\n- `scalance_sc636-2c_firmware 3.0`\n- `scalance_sc642-2c_firmware 3.0`\n- `scalance_sc646-2c_firmware 3.0`","depth":"twilight","depthScore":43,"depthScoreParts":{"impact":42.9,"likelihood":0.3,"exploitation":0,"ransomware":0},"changes":[]}