New Aquabot Botnet Exploits CVE-2024
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
CVE-2018-10562+1 related CVE | Unauthenticated RCE in Dasan GPON Routers (CVE-2018-10562) | 9.8 | 100% | KEVRansomwarePoC ×2 | KEV |
| CVE-2018-17532 | Teltonika RUT9XX routers with firmware before 00.04.233 are prone to multiple unauthenticated OS command injection vulnerabilities in autologin.cgi and… | 9.8 | 71% | PoC ×3 | |
| CVE-2022-31137 | Roxy-WI: Versions prior to 6.1.1.0 are subject to a remote code execution vulnerability. System commands can be run remotely via the… | 9.8 | 91% | PoC | |
| CVE-2023-26801 | LB-LINK BL-AC1900_2.0 v1.0.1, LB-LINK BL-WR9000 v2.4.9, LB-LINK BL-X26 v1.2.5, and LB-LINK BL-LTE300 v1.0.8 were discovered to contain a command injection… | 9.8 | 78% | PoC | |
| CVE-2024-41710 | Argument Injection RCE in Mitel 6800/6900/6900w Series SIP Phones | 7.2 | 42% | KEVPoC | KEV |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Jan 30, 2025 Vulnerability / IoT Security A Mirai botnet variant dubbed Aquabot has been observed actively attempting to exploit a medium-severity security flaw impacting Mitel phones in order to ensnare them into a network capable of mounting distributed denial-of-service (DDoS) attacks. The vulnerability in question is CVE-2024-41710 (CVSS score: 6.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.