CVE-2021-41987

In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution

published March 16, 2022

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scep_server_name value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.16229 · 96.9th percentile
Published
2022-03-16T14:44Z
EPSS history
Timeline
  • 16 MAR 14:44Z
    In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution
    cvelistv5