Malware exploits 5-year-old zero-day to infect end-of-life IP cameras

**Corona Mirai exploits CVE-2024-7029 in EoL AVTECH cameras leading to active infections and DDoS botnet deployment.** A high-severity RCE in the AVTECH AVM1203 camera firmware (brightness parameter) — unpatched because the devices reached end-of-life in 2019 — has public PoC exploit code and has been leveraged since March 18, 2024 by the Corona Mirai variant to download JavaScript that loads the primary botnet payload; affected devices are recommended to be taken offline and replaced.