CVE-2019-13954

Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion

published July 26, 2019

CVSS
—
EPSS
4%
Percentile
91.0
In the wild
Unconfirmed
What it is

Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system. Malicious code cannot be injected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04258 · 91.0th percentile
Published
2019-07-26T12:15Z
EPSS history
Timeline
  • 26 JUL 12:15Z
    Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion
    cvelistv5