An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.

This plugin only works with Tenable.ot.
Please visit https://www.tenable.com/products/tenable-ot for more information.

The version of busybox installed on the remote CBL Mariner 2.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39810 advisory.

  - An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.
    (CVE-2023-39810)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of busybox installed on the remote Azure Linux 3.0 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the CVE-2023-39810 advisory.

  - An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.
    (CVE-2023-39810)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory     traversal.(CVE-2023-39810)

Tenable has extracted the preceding description block directly from the EulerOS busybox security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to the versions of the busybox package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory     traversal.(CVE-2023-39810)

    In tar in BusyBox through 1.37.0, a TAR archive can have filenames hidden from a listing through the use     of terminal escape sequences.(CVE-2025-46394)

Tenable has extracted the preceding description block directly from the EulerOS busybox security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.
    (CVE-2023-39810)

Note that Nessus relies on the presence of the package as reported by the vendor.

The Unity Linux 20 host has a package installed that is affected by a vulnerability as referenced in the UTSA-2025-936063 advisory.

    An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.

Tenable has extracted the preceding description block directly from the Unity Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

The version of Tencent Linux installed on the remote TencentOS Server 4 host is prior to tested version. It is, therefore, affected by a vulnerability as referenced in the TSSA-2025:0576 advisory.

    Package updates are available for TencentOS Server 4 that fix the following vulnerabilities:

    CVE-2023-39810:
    An issue in the CPIO command of Busybox v1.33.2 allows attackers to execute a directory traversal.

Tenable has extracted the preceding description block directly from the Tencent Linux security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Published	Updated	Severity
505125	Siemens SCALANCE and RUGGEDCOM Improper Input Validation (CVE-2023-39810)	Tenable OT Security	Tenable.ot	2/10/2026	3/5/2026	high
235433	CBL Mariner 2.0 Security Update: busybox (CVE-2023-39810)	Nessus	MarinerOS Local Security Checks	5/7/2025	5/7/2025	high
235434	Azure Linux 3.0 Security Update: busybox (CVE-2023-39810)	Nessus	Azure Linux Local Security Checks	5/7/2025	9/15/2025	high
261878	EulerOS 2.0 SP12 : busybox (EulerOS-SA-2025-2001)	Nessus	Huawei Local Security Checks	9/10/2025	9/10/2025	high
270007	EulerOS 2.0 SP11 : busybox (EulerOS-SA-2025-2188)	Nessus	Huawei Local Security Checks	10/11/2025	10/11/2025	high
261875	EulerOS 2.0 SP10 : busybox (EulerOS-SA-2025-2063)	Nessus	Huawei Local Security Checks	9/10/2025	9/10/2025	high
271318	EulerOS 2.0 SP13 : busybox (EulerOS-SA-2025-2283)	Nessus	Huawei Local Security Checks	10/24/2025	10/24/2025	high
226224	Linux Distros Unpatched Vulnerability : CVE-2023-39810	Nessus	Misc.	3/5/2025	2/2/2026	high
266983	Unity Linux 20.1050e / 20.1060e / 20.1070e Security Update: busybox (UTSA-2025-936063)	Nessus	Unity Linux Local Security Checks	10/7/2025	10/10/2025	high
270047	EulerOS 2.0 SP11 : busybox (EulerOS-SA-2025-2220)	Nessus	Huawei Local Security Checks	10/11/2025	10/11/2025	high
264444	EulerOS 2.0 SP12 : busybox (EulerOS-SA-2025-2032)	Nessus	Huawei Local Security Checks	9/10/2025	9/10/2025	high
264477	EulerOS 2.0 SP10 : busybox (EulerOS-SA-2025-2091)	Nessus	Huawei Local Security Checks	9/10/2025	9/10/2025	high
276231	TencentOS Server 4: busybox (TSSA-2025:0576)	Nessus	Tencent Local Security Checks	11/20/2025	12/4/2025	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high

high

high

high

high