What’s Vulnerable › Vulnerabilities

CVE-2024-45163

• Severity: critical (CVSS 9.1 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.8% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2024-08-22 · updated 2026-09-16
• Weakness: CWE-400

Description

The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username (such as root), or can send arbitrary data.

Affected products

• Mirai Botnet: through 2024-08-19

References

• https://cypressthatkid.medium.com/remote-dos-exploit-found-in-mirai-botnet-source-code-27a1aad284f1
• https://flowtriq.com/blog/cve-2024-45163-mirai-botnet-kill-switch
• https://pastebin.com/6tqHnCva
• https://traztech.ca/research
• https://youtu.be/aJkvSr85ML8

Get alerted when CVE-2024-45163 or the next vulnerability affects your stack