PT-2024-31446 · Unknown · Mirai Botnet

Published 2024-08-21 · Updated 2026-04-11 · CVE-2024-45163

Positive Technologies (AI Summary)

CVSS v3.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mirai botnet versions prior to 2024-08-19

Description The Mirai botnet through 2024-08-19 exhibits improper handling of simultaneous TCP connections to the command and control (CNC) server. This allows unauthenticated sessions to remain open, leading to resource consumption. An attacker can exploit this by sending a recognized username, such as root, or arbitrary data.

Recommendations Update the Mirai botnet to a version after 2024-08-19 to address the improper handling of TCP connections.

Fix

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2024-45163

Affected Products

Mirai Botnet

References · 27

• https://nvd.nist.gov/vuln/detail/CVE-2024-45163 · Security Note
• https://youtu.be/aJkvSr85ML8 · Note
• https://twitter.com/thejacobmasse/status/2042879053842039110 · Twitter Post
• https://twitter.com/Dinosn/status/2033074754429522390 · Twitter Post
• https://flowtriq.com/blog/cve-2024-45163-mirai-botnet-kill-switch · Note
• https://twitter.com/CVEnew/status/1826633326876393943 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rv5cez/top_10_trending_cves_16032026 · Reddit Post
• https://reddit.com/r/CVEWatch/comments/1rw2ajy/top_10_trending_cves_17032026 · Reddit Post
• https://twitter.com/the_yellow_fall/status/1827887442298626232 · Twitter Post
• https://twitter.com/cracbot/status/1828311539172155861 · Twitter Post
• https://t.me/RNetsec/22739 · Telegram Post
• https://cypressthatkid.medium.com/remote-dos-exploit-found-in-mirai-botnet-source-code-27a1aad284f1 · Note
• https://twitter.com/CveFindCom/status/1826967753476956181 · Twitter Post
• https://pastebin.com/6tqHnCva · Note
• https://twitter.com/moton/status/1828048938605355218 · Twitter Post