CVE-2020-20221

Опубликовано: 21 июл. 2021

Источник: nvd

CVSS3: 6.5

CVSS2: 6.8

EPSS Низкий

Описание

Mikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial of Service due to overloading the systems CPU.

Ссылки

https://cwe.mitre.org/data/definitions/400.html
Third Party Advisory
https://seclists.org/fulldisclosure/2020/May/30
Mailing List
Third Party Advisory
https://seclists.org/fulldisclosure/2021/May/1
Exploit
Mailing List
Third Party Advisory
https://cwe.mitre.org/data/definitions/400.html
Third Party Advisory
https://seclists.org/fulldisclosure/2020/May/30
Mailing List
Third Party Advisory
https://seclists.org/fulldisclosure/2021/May/1
Exploit
Mailing List
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:mikrotik:routeros:*:*:*:*:ltr:*:*:*

Версия до 6.44.6 (исключая)

EPSS

Процентиль: 78%

0.0111

Низкий

6.5 Medium

CVSS3

6.8 Medium

CVSS2

Дефекты

CWE-400

Связанные уязвимости

GHSA-m2h9-c2v8-hj79