A Mirai botnet version dubbed Aquabot was observed actively trying to exploit a security flaw of medium severity impacting Mitel phones to ensnare those phones into a network that can mount distributed denial-of service (DDoS).
The vulnerability is CVE-2024-41710, (CVSS score 6.8). It is a case of command insertion in the boot process. This could allow a malicious agent to gain access.