CVE-2024-45163

The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username (such as root), or can send arbitrary data.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 3.9 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required NONE

User Interaction NONE

Confidentiality Impact NONE

Integrity Impact HIGH

Availability Impact HIGH

Scope UNCHANGED

References

Link	Resource
https://cypressthatkid.medium.com/remote-dos-exploit-found-in-mirai-botnet-source-code-27a1aad284f1
https://flowtriq.com/blog/cve-2024-45163-mirai-botnet-kill-switch
https://pastebin.com/6tqHnCva
https://traztech.ca/research
https://youtu.be/aJkvSr85ML8

Configurations

No configuration.

History

16 Sep 2026, 21:17

Type	Values Removed	Values Added
References		() https://traztech.ca/research -

Information

Published : 2024-08-22 04:15

Updated : 2026-09-16 21:17

NVD link : CVE-2024-45163

Mitre link : CVE-2024-45163

CVE.ORG link : CVE-2024-45163

JSON object : View

Products Affected

No product.

CWE

CWE-400

Uncontrolled Resource Consumption

{"id": "CVE-2024-45163", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2024-45163", "role": "CISA Coordinator", "options": [{"exploitation": "poc"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2024-08-22T14:21:06.829854Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "NONE", "confidentialityImpact": "NONE"}, "impactScore": 5.2, "exploitabilityScore": 3.9}]}, "affected": [{"source": "cve@mitre.org", "affectedData": [{"vendor": "n/a", "product": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}]}, {"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "affectedData": [{"cpes": ["cpe:2.3:a:mirai:botnet:*:*:*:*:*:*:*:*"], "vendor": "mirai", "product": "botnet", "versions": [{"status": "affected", "version": "0", "versionType": "custom", "lessThanOrEqual": "2024-08-19"}], "defaultStatus": "unknown"}]}], "published": "2024-08-22T04:15:20.247", "references": [{"url": "https://cypressthatkid.medium.com/remote-dos-exploit-found-in-mirai-botnet-source-code-27a1aad284f1", "source": "cve@mitre.org"}, {"url": "https://flowtriq.com/blog/cve-2024-45163-mirai-botnet-kill-switch", "source": "cve@mitre.org"}, {"url": "https://pastebin.com/6tqHnCva", "source": "cve@mitre.org"}, {"url": "https://traztech.ca/research", "source": "cve@mitre.org"}, {"url": "https://youtu.be/aJkvSr85ML8", "source": "cve@mitre.org"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-400"}]}], "descriptions": [{"lang": "en", "value": "The Mirai botnet through 2024-08-19 mishandles simultaneous TCP connections to the CNC (command and control) server. Unauthenticated sessions remain open, causing resource consumption. For example, an attacker can send a recognized username (such as root), or can send arbitrary data."}, {"lang": "es", "value": "Mirai botnet hasta el 19 de agosto de 2024 maneja mal las conexiones TCP simult\u00e1neas al servidor CNC (comando y control). Las sesiones no autenticadas permanecen abiertas, lo que provoca un consumo de recursos. Por ejemplo, un atacante puede enviar un nombre de usuario reconocido (como root) o puede enviar datos arbitrarios."}], "lastModified": "2026-09-16T21:17:06.310", "sourceIdentifier": "cve@mitre.org"}