Two New IoT Vulnerabilities Identified with Mirai Payloads
Summary: Unit 42 researchers analyzed four Mirai variants delivered through two newly discovered command injection exploits, one abusing an unsanitized NTP_SERVER HTTP parameter and the other an unsanitized pid parameter. The first campaign ran from July 23 to Sept. 23, 2020, with 42 unique alerts, while the second produced 48 unique attack incidents in 12 seconds on Aug. 16, 2020.
What you should know: Variant four carries an infection capability the other three lack, and the vulnerable firmware sits on IoT devices some vendors no longer support - flaws that do not go away with an end-of-life announcement.
Read the original at Unit 42 Palo Alto Networks ↗
- Topics
- Zero-Days & Exploits
- Related
- New Sign Drop Exploit Can Abuse Windows Defender to Bypass Security Protections Cyber Risks · Nov 13, 2026New Sign Drop Zero-Day Exploit Turns Windows CLFS Security Feature Into SYSTEM Access Cyber Risks · Nov 12, 2026November Patch Tuesday: An Overflowing Cornucopia of CVEs Cyber Risks · Nov 10, 2026