CVE-2018-1158

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability

published August 23, 2018

CVSS
—
EPSS
2%
Percentile
84.5
In the wild
Unconfirmed
What it is

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server via recursive parsing of JSON.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.02483 · 84.5th percentile
Published
2018-08-23T19:00Z
EPSS history
Timeline
  • 23 AUG 19:00Z
    Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability
    cvelistv5