Multiple vulnerabilities in MikroTik RouterOS

Published: 2020-05-12

Risk	Low
Patch available	YES
Number of vulnerabilities	2
CVE-ID	N/A
CWE-ID	CWE-400 CWE-119
Exploitation vector	Network
Public exploit	N/A
Vulnerable software Subscribe	MikroTik RouterOS Hardware solutions / Routers & switches, VoIP, GSM, etc
Vendor	MikroTik

Security Bulletin

This security bulletin contains information about 2 vulnerabilities.

1) Resource exhaustion

EUVDB-ID: #VU27707

Risk: Low

CVSSv3.1: 6.7 [CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H/E:U/RL:O/RC:C]

CVE-ID: N/A

CWE-ID: CWE-400 - Resource exhaustion

Exploit availability: No

Description

The vulnerability allows a remote user to perform a denial of service (DoS) attack.

The vulnerability exists due to the cerm process does not properly control consumption of internal resources. A remote authenticated user can send a specially crafted packet that triggers high CPU load and perform a denial of service (DoS) attack.

Mitigation

Install updates from vendor's website.

Vulnerable software versions

MikroTik RouterOS: 6.45 - 6.46.3

External links

http://seclists.org/fulldisclosure/2020/May/30

Q & A

Can this vulnerability be exploited remotely?

Yes. This vulnerability can be exploited by a remote authenticated user via the Internet.

How the attacker can exploit this vulnerability?

The attacker would have to send a specially crafted request to the affected device in order to exploit this vulnerability.

Is there known malware, which exploits this vulnerability?

No. We are not aware of malware exploiting this vulnerability.

2) Memory corruption

EUVDB-ID: #VU27708