CVE-2024-45163

CRITICAL

Mirai Botnet through 2024-08-19 - Unauthenticated Denial of Service via TCP Connection Exhaustion

Title source: llm
STIX 2.1

Description

The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username (such as root), or can send arbitrary data.

References (4)

Core 4

Scores

CVSS v3 9.1
EPSS 0.0077
EPSS Percentile 50.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation poc
Automatable yes
Technical Impact partial

Details

CWE
CWE-400
Status published
Published Aug 22, 2024
Tracked Since Feb 18, 2026