Required CVE Record Information
Description
Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system via a crafted HTTP POST request.
Updated:
This container includes required additional information provided by the CVE Program for this vulnerability.
References 4 Total
- https://www.tenable.com/security/research/tra-2018-21 x_transferred
- https://mikrotik.com/download/changelogs x_transferred
- https://mikrotik.com/download/changelogs/bugfix-release-tree x_transferred
- seclists.org: 20190723 Two vulnerabilities found in MikroTik's RouterOS mailing-listx_transferred