CVE-2017-17537CWE-20

CVE-2017-17537

High · published December 13, 2017

CVSS v3.0
7.5
EPSS
2%
Percentile
77.5
In the wild
Unconfirmed
What it is

MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by connecting to TCP port 53 and sending data that begins with many '\0' characters, possibly related to DNS.

The record
Technical detail
CVSS v3.0
7.5 · HIGH
Vector
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
CVSS v4.0
Not supplied
EPSS
0.01750 · 77.5th percentile
Weakness
CWE-20 · Improper Input Validation
Published
2017-12-13T21:29Z
Affected products (2)
ProductVersionsFixed in
mikrotik/routerboardall versions—
mikrotik/routerboardall versions—
References (3)
https://packetstorm.news/files/id/145382 · [email protected]https://www.exploit-db.com/exploits/43200/ · [email protected]https://www.exploit-db.com/exploits/43200/ · af854a3a-2127-422b-91ae-364da2661108
EPSS history
Timeline
  • 13 DEC 16:00Z
    MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by connecting to TCP port 53 and sending data…
    cvelistv5