MikroTik Router OS Directory Traversal Vulnerability

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface...

Vulnerability of the RouterOS operating system’s /ram/pckg/security/nova/bin/ipsec process, allowing a hacker to trigger a service failure

The vulnerability of the /ram/pckg/security/nova/bin/ipsec” function in the RouterOS operating system is related to the use of the “assert” or similar operator. Exploiting this vulnerability allows a malicious actor to cause service failures remotely...

MikroTik RouterOS Memory Corruption Vulnerability (CNVD-2021-70153)

MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in PCs to enable them to provide router functionality.A memory corruption vulnerability exists in the /nova/bin/lcdstat process in versions prior to Mikrotik Routeros...

MikroTik RouterOS Assertion Failure Vulnerability

MikroTik RouterOS is a Linux-based router operating system developed by MikroTik Latvia.An assertion failure vulnerability exists in MikroTik RouterOS, which stems from an authentication error in the product's /ram/pckg/security/nova/bin/ipsec process. An attacker could exploit this vulnerability...

CVE-2020-20219

Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/igmp-proxy process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...

CVE-2020-20262

Mikrotik RouterOs before 6.47 stable tree suffers from an assertion failure vulnerability in the /ram/pckg/security/nova/bin/ipsec process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet...

CVE-2020-20221

Mikrotik RouterOs before 6.44.6 long-term tree suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU...

CVE-2020-20219

Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/igmp-proxy process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...

CVE-2020-20221

Mikrotik RouterOs before 6.44.6 long-term tree suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU...

CVE-2020-20262

Mikrotik RouterOs before 6.47 stable tree suffers from an assertion failure vulnerability in the /ram/pckg/security/nova/bin/ipsec process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet...

Denial of service

Mikrotik RouterOs before 6.44.6 long-term tree suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU...

Null pointer dereference

Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/igmp-proxy process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...

CVE-2020-20221

Mikrotik RouterOs before 6.44.6 long-term tree suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU...

CVE-2020-20221

The CVE-2020-20221 issue affects Mikrotik RouterOS prior to 6.44.6. A vulnerability in the /nova/bin/cerm process allows an authenticated remote attacker to trigger uncontrolled resource consumption, leading to Denial of Service by overloading CPU. Multiple connected sources (Red Hat, Red Team fe...

CVE-2020-20262

Mikrotik RouterOs before 6.47 stable tree suffers from an assertion failure vulnerability in the /ram/pckg/security/nova/bin/ipsec process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet...

CVE-2020-20262

The entries identify CVE-2020-20262 affecting MikroTik RouterOS before version 6.47 (stable). The vulnerability is an assertion failure in the /ram/pckg/security/nova/bin/ipsec process, exploitable by an authenticated remote attacker sending a crafted packet to cause a Denial of Service. Connecte...

CVE-2020-20219

Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/igmp-proxy process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference...

CVE-2020-20219

CVE-2020-20219 affects MikroTik RouterOS 6.44.6 (long-term tree). The vulnerable component is /nova/bin/igmp-proxy, where a memory corruption flaw can be triggered by an authenticated remote attacker, causing a Denial of Service via a NULL pointer dereference. No explicit remediation is provided ...

CVE-2020-20262: Reachable Assertion

Mikrotik RouterOs before 6.47 stable tree suffers from an assertion failure vulnerability in the /ram/pckg/security/nova/bin/ipsec process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet...

PT-2021-10449 · Mikrotik · Routeros +1

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions prior to 6.44.6 Description: The issue is related to an uncontrolled resource consumption in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial of Service due to overloading the system's...