Exploit for Improper Validation of Array Index in Mikrotik Routeros

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS...

MikroTik RouterOS Denial Of Service / Memory Corruption Vulnerability

MikroTik RouterOS suffers from two vulnerabilities. The cerm process suffers from an uncontrolled resource consumption issue. By sending a crafted packet, an authenticated remote user can cause a high cpu load, which may make the device respond slowly or unable to respond. Versions until stable...

PT-2020-3074

Name of the Vulnerable Software and Affected Versions RouterOS affected versions not specified Description The issue is related to a buffer overflow in the Traceroute service of RouterOS, used in MikroTik routers. This can be exploited by a remote attacker, who can cause a denial of service by...

PT-2020-3073

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description The issue is related to the implementation of the CERM crypto export restrictions manager in the RouterOS operating system of MikroTik routers. It involves uncontrolled resource...

MikroTik RouterOS <= 6.44.3 DoS Vulnerability

MikroTik RouterOS is prone to a denial of service DoS vulnerability in the SSH daemon. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

PT-2020-1957

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions through 6.44.3 Description The issue is related to uncontrolled resource management in the SSH daemon of MikroTik routers. This could allow remote attackers to generate CPU activity, trigger refusal of new authorized...

MikroTik RouterOS DNS Cache Poisoning (CVE-2019-3978)

Binary data mikrotikcve-2019-3978.nbin...

PT-2020-6923 · Mikrotik · Mikrotik Routeros

Name of the Vulnerable Software and Affected Versions: MikroTik Router versions 6.46.3 and earlier Description: The issue allows an attacker to cause a denial of service via misconfiguration in the SSH daemon, potentially leading to uncontrolled resource consumption. This can be exploited by a...

CVE-2018-5951

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

Code injection

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

CVE-2018-5951

MikroTik RouterOS is affected by CVE-2018-5951. The issue arises when a 1-byte packet is crafted and sent to a RouterOS IPv6 address using IP Protocol 97, which will cause the RouterOS device to reboot imminently. All RouterOS versions that support EoIPv6 are vulnerable. Connected documents confi...

CVE-2018-5951

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

CVE-2018-5951: Undefined Security Weakness

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

PT-2020-8935

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS affected versions not specified Description An issue was discovered in Mikrotik RouterOS where crafting a packet with a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterO...

MikroTik WinBox Path Traversal Vulnerability

MikroTik RouterOS is a routing operating system, developed based on the Linux kernel, compatible with x86 PC routing software, through which a standard PC computer can be turned into a professional router.Winbox is a Windows-based software for remote management of RouterOS, providing an intuitive...

The vulnerability of the RouterOS operating system in MikroTik routers, related to the assignment of the zero pointer, allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system for MikroTik routers exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially created package...

MikroTik's RouterOS Console Process Memory Corruption Vulnerability

RouterOS is the operating system used on MikroTik devices such as switches, routers and access points. A memory corruption vulnerability exists in MikroTik's RouterOS console process. A null pointer reference that allows an authenticated remote attacker to send a carefully crafted packet causes t...

MikroTik's RouterOS Console Process Assertion Failure Vulnerability

RouterOS is the operating system used on MikroTik devices such as switches, routers and access points. A memory corruption vulnerability exists in MikroTik's RouterOS console process. A remote attacker who allows authentication could crash the console process by sending carefully crafted packets...

PT-2020-1560

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description The issue is related to insufficient input validation in the RouterOS operating system of MikroTik routers. This can be exploited by a remote attacker using a specially crafted pack...

PT-2020-1559

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description The issue is related to a null pointer dereference in the RouterOS operating system of MikroTik routers. It can be exploited by a remote attacker using a specially crafted packet to...