PT-2024-31446 · Unknown · Mirai Botnet

Published 2024-08-21 · Updated 2026-03-16 · CVE-2024-45163

Positive Technologies · (AI Summary)

CVSS v3.1

9.1

9.1

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Name of the Vulnerable Software and Affected Versions Mirai botnet through 2024-08-19

Description The Mirai botnet mishandles simultaneous TCP connections to the CNC (command and control) server, causing unauthenticated sessions to remain open and consume resources. An attacker can exploit this by sending a recognized username, such as

root

, or arbitrary data.

Recommendations As a temporary workaround, consider restricting access to the CNC server to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2024-45163

Affected Products

Mirai Botnet

References · 22

• https://nvd.nist.gov/vuln/detail/CVE-2024-45163 · Security Note
• https://twitter.com/VulmonFeeds/status/1826494309379506413 · Twitter Post
• https://t.me/cvedetector/3882 · Telegram Post
• https://twitter.com/cracbot/status/1828311539172155861 · Twitter Post
• https://t.me/pentestingnews/50767 · Telegram Post
• https://twitter.com/CVEnew/status/1826633326876393943 · Twitter Post
• https://reddit.com/r/CVEWatch/comments/1rv5cez/top_10_trending_cves_16032026 · Reddit Post
• https://cypressthatkid.medium.com/remote-dos-exploit-found-in-mirai-botnet-source-code-27a1aad284f1 · Note
• https://twitter.com/cracbot/status/1827949257128898683 · Twitter Post
• https://twitter.com/Dinosn/status/2033074754429522390 · Twitter Post
• https://twitter.com/_r_netsec/status/2033071467186028676 · Twitter Post
• https://twitter.com/the_yellow_fall/status/1827887442298626232 · Twitter Post
• https://t.me/RNetsec/22739 · Telegram Post
• https://twitter.com/CveFindCom/status/1826967753476956181 · Twitter Post
• https://pastebin.com/6tqHnCva · Note