Lucene search

K
cve[email protected]CVE-2018-7445
HistoryMar 19, 2018 - 9:29 p.m.

CVE-2018-7445

2018-03-1921:29:01
CWE-119
web.nvd.nist.gov
657
In Wild
mikrotik
routeros
smb
buffer overflow
code execution
vulnerability
remote attack
authentication
nvd

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.855 High

EPSS

Percentile

98.6%

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.

Affected configurations

NVD
Node
mikrotikrouterosRange<6.41.3
Node
mikrotikrouterosMatch6.4.2rc11
OR
mikrotikrouterosMatch6.4.2rc12
OR
mikrotikrouterosMatch6.4.2rc14
OR
mikrotikrouterosMatch6.4.2rc15
OR
mikrotikrouterosMatch6.4.2rc18
OR
mikrotikrouterosMatch6.4.2rc2
OR
mikrotikrouterosMatch6.4.2rc20
OR
mikrotikrouterosMatch6.4.2rc23
OR
mikrotikrouterosMatch6.4.2rc24
OR
mikrotikrouterosMatch6.4.2rc27
OR
mikrotikrouterosMatch6.4.2rc5
OR
mikrotikrouterosMatch6.4.2rc6
OR
mikrotikrouterosMatch6.4.2rc9

10 High

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.855 High

EPSS

Percentile

98.6%