CVE-2018-1000500
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitabl…
Published: 2018-06-26 · CVSS: 6.5 · CVSS 3.1
Busybox contains a Missing SSL certificate validation vulnerability in The "busybox wget" applet that can result in arbitrary code execution. This attack appear to be exploitable via Simply download any file over HTTPS using "busybox wget https://compromised-domain.com/important-file".
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7