Is CVE-2024-47065 actively exploited?

No active exploitation of CVE-2024-47065 has been confirmed so far. Continue monitoring, as exploit status can change.

Can CVE-2024-47065 be exploited remotely?

Yes. CVE-2024-47065 is exploitable remotely over the network (CVSS attack vector: Network).

What is the CVSS score of CVE-2024-47065?

CVE-2024-47065 has a CVSS score of 6.5 (MEDIUM).

HOME VULNERABILITIESCVE-2024-47065

MEDIUM

CVE-2024-47065

CWE-799Published: July 11, 2025· Updated: Jun 17, 2026

6.5

CVSS v3.1

Official Description

Meshtastic is an open source mesh networking solution. Prior to 2.5.1, traceroute responses from the remote node are not rate limited. Given that there are SNR measurements attributed to each received transmission, this is a guaranteed way to get a remote station to reliably and continuously respond. You could easily get 100 samples in a short amount of time (estimated 2 minutes), whereas passively doing the same could take hours or days. There are secondary effects that non-ratelimited traceroute does also allow a 2:1 reflected DoS of the network as well, but these concerns are less than the problem with positional confidentiality (other DoS routes exist). This vulnerability is fixed in 2.5.1.

NVD Source

Technical Analysis

CVE-2024-47065 can be exploited remotely over the network without requiring physical or adjacent access, significantly expanding the attack surface for threat actors.

The vulnerability requires no privileges and no user interaction, making it a prime target for automated exploitation campaigns and worm-like propagation.