CVE-2020-20217

Опубликовано: 08 июл. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 4

EPSS Низкий

Описание

Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/route process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.

Ссылки

https://cwe.mitre.org/data/definitions/400.html
Third Party Advisory
https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20217/README.md
Third Party Advisory
https://mikrotik.com/
Vendor Advisory
https://cwe.mitre.org/data/definitions/400.html
Third Party Advisory
https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2020-20217/README.md
Third Party Advisory
https://mikrotik.com/
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*

Версия до 6.47 (исключая)

EPSS

Процентиль: 83%

0.01943

Низкий

6.5 Medium

CVSS3

4 Medium

CVSS2

Дефекты

CWE-400

Связанные уязвимости

GHSA-qxjj-wxg4-3fhm