Hackers Exploit Samsung MagicINFO, GeoVision IoT Flaws to Deploy Mirai Botnet
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-10561 | Authentication Bypass in Dasan GPON Home Routers (CVE-2018-10561) | 9.8 | 93% | KEVPoC ×2 | KEV |
| CVE-2024-11120 | Unauthenticated OS Command Injection in GeoVision Devices | 9.8 | 28% | KEVPoC | KEV |
| CVE-2024-6047 | Unauthenticated OS Command Injection in End-of-Life GeoVision Devices | 9.8 | 10% | KEVPoC | KEV |
| CVE-2024-7399 | Unauthenticated Path Traversal File Write in Samsung MagicINFO 9 Server | 9.8 | 92% | KEV | KEV |
From the original article
3 min read at thehackernews.com
Ravie Lakshmanan May 06, 2025 Internet of Thing / Vulnerability Threat actors have been observed actively exploiting security flaws in GeoVision end-of-life (EoL) Internet of Things (IoT) devices to corral them into a Mirai botnet for conducting distributed denial-of-service (DDoS) attacks.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.