Malwarecritical
Mirai V3G4 botnet exploits 13 flaws to target IoT devices
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2012-4869 | — | 70% | — | ||
| CVE-2014-9727 | — | 72% | — | ||
| CVE-2017-5173 | An Improper Neutralization of Special Elements (in an OS command) issue was discovered in Geutebruck IP Camera G-Cam/EFD-2250 Version 1.11.0.12 | 9.8 | 30% | PoC | |
| CVE-2019-15107 | Unauthenticated Command Injection RCE in Webmin <= 1.920 | 9.8 | 100% | KEVRansomwarePoC ×5 | KEV |
| CVE-2020-15415 | Unauthenticated OS Command Injection in DrayTek Vigor3900/2960/300B Routers | 9.8 | 84% | KEVPoC | KEV |
| CVE-2020-8515 | Unauthenticated Command Injection RCE in DrayTek Vigor3900/2960/300B Routers | 9.8 | 100% | KEVPoC | KEV |
| CVE-2022-26134 | Unauthenticated OGNL Injection RCE in Atlassian Confluence Server/Data Center | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2022-36267 | In Airspan AirSpot 5410 version 0.3.4.1-4 and under there exists a Unauthenticated remote command injection vulnerability | 9.8 | 54% | PoC ×2 | |
| CVE-2022-4257 | C-DATA Web Management System: It has been rated as critical. This issue affects some unknown processing of the file cgi-bin/jumpto.php of the component GET… | 9.8 | 44% | PoC |
From the original article
2 min read at securityaffairs.com
During the second half of 2022, a variant of the Mirai bot, tracked as V3G4, targeted IoT devices by exploiting tens of flaws. Palo Alto Networks Unit 42 researchers reported that a Mirai variant called V3G4 was attempting to exploit several flaws to infect IoT devices from July to December 2022. CVE-2012-4869 : FreePBX Elastix Remote Command Execution Vulnerability
By @securityaffairs · securityaffairs.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.