CVE-2018-1157

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability

published August 23, 2018

CVSS
—
EPSS
4%
Percentile
91.2
In the wild
Unconfirmed
What it is

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system via a crafted HTTP POST request.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04375 · 91.2th percentile
Published
2018-08-23T19:00Z
EPSS history
Timeline
  • 23 AUG 19:00Z
    Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability
    cvelistv5