CVE-2019-13955

Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion

published July 26, 2019

CVSS
—
EPSS
4%
Percentile
89.8
In the wild
Unconfirmed
What it is

Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server via recursive parsing of JSON. Malicious code cannot be injected.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03754 · 89.8th percentile
Published
2019-07-26T12:13Z
EPSS history
Timeline
  • 26 JUL 12:13Z
    Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion
    cvelistv5