Mirai-based Botnet Exploiting Zero-Day Bugs in Routers and NVRs for Massive DDoS Attacks

🗓️ 23 Nov 2023 10:47:00Reported by The Hacker NewsType

Mirai-based Botnet Exploiting Zero-Day Bugs in Routers and NVRs for Massive DDoS Attacks. Vulnerabilities with RCE functionality. HailBot and wso-ng malware

Reporter	Title	Published	Views	Family All 35
ATTACKERKB	CVE-2023-49897	6 Dec 202300:00	–	attackerkb
ATTACKERKB	CVE-2023-47565	8 Dec 202316:15	–	attackerkb
BDU FSTEC	The vulnerability of the microprogrammed software of the FXC AE1021 and FXC AE1021PE routers lies in the failure to take measures to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.	14 Dec 202300:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the QNAP QVR surveillance system arises from the lack of measures taken to neutralize special elements used in the operating system’s command set. This allows attackers to execute arbitrary commands.	10 Jan 202400:00	–	bdu_fstec
Circl	CVE-2023-47565	18 Dec 202309:41	–	circl
Circl	CVE-2023-49897	18 Dec 202309:41	–	circl
CISA KEV Catalog	QNAP VioStor NVR OS Command Injection Vulnerability	21 Dec 202300:00	–	cisa_kev
CISA KEV Catalog	FXC AE1021, AE1021PE OS Command Injection Vulnerability	21 Dec 202300:00	–	cisa_kev
CISA	CISA Adds Two Known Exploited Vulnerabilities to Catalog	21 Dec 202312:00	–	cisa
CNNVD	FXC AE1021 Security Vulnerability	6 Dec 202300:00	–	cnnvd

18 Dec 2023 04:47Current

8High risk

Vulners AI Score8

CVSS 3.18.8

EPSS0.73277