Описание
Mikrotik RouterOs before 6.46.5 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable.
Ссылки
- Mailing ListThird Party Advisory
- Mailing ListThird Party Advisory
Уязвимые конфигурации
Конфигурация 1Версия до 6.46.5 (исключая)
cpe:2.3:o:mikrotik:routeros:*:*:*:*:-:*:*:*
EPSS
Процентиль: 70%
0.00646
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-787
Связанные уязвимости
CVSS3: 6.5
github
больше 3 лет назад
Mikrotik RouterOs before 6.46.5 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable.
EPSS
Процентиль: 70%
0.00646
Низкий
6.5 Medium
CVSS3
4 Medium
CVSS2
Дефекты
CWE-787