Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
prionPRIOn knowledge basePRION:CVE-2018-1157
HistoryAug 23, 2018 - 7:29 p.m.

Memory corruption

2018-08-2319:29:00
PRIOn knowledge base
www.prio-n.com
4

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.004 Low

EPSS

Percentile

72.8%

JSON

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system via a crafted HTTP POST request.

CPENameOperatorVersion
routeroslt6.40.9
routeroslt6.42.7

Related

cve 1
nessus 2
openvas 2
threatpost 1
thn 1
cve
cve
CVE-2018-1157
2018-08-23 19:29:00
nessus
nessus
MikroTik RouterOS Uncontrolled Resource Consumption (CVE-2018-1157)
2024-02-27 00:00:00
MikroTik RouterOS < 6.40.9 / 6.42.7 / 6.43 multiple vulnerabilities.
2018-08-24 00:00:00
openvas
openvas
MikroTik RouterOS Multiple Vulnerabilities
2018-08-24 00:00:00
MikroTik RouterOS < 6.44.5 (LTS), < 6.45.1 (Stable) Multiple DoS Vulnerabilities
2019-07-15 00:00:00
threatpost
threatpost
PoC Attack Escalates MikroTik Router Bug to ‘As Bad As It Gets’
2018-10-08 00:07:04
thn
thn
New Exploit for MikroTik Router WinBox Vulnerability Gives Full Root Access
2018-10-08 15:34:00

6.5 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

6.3 Medium

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

0.004 Low

EPSS

Percentile

72.8%

JSON
Related for PRION:CVE-2018-1157
cve1nessus2openvas2threatpost1thn1