CVE-2018-10070

EPSS 13.0%

A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins with many '\0' characters, preventing the affected router from accepting new FTP connections. The router will reboot after 10 minutes, logging a "router was rebooted without proper shutdown" message.

Productos afectados

n/a · n/a

PoCs públicas encontradas — 3

cve_referencepacketstormsecurity.com/files/147183/MikroTik-6.41.4-Denial-Of-Service.htmlno verificado cve_referencewww.exploit-db.com/exploits/44450/no verificado exploitdbwww.exploit-db.com/exploits/44450no verificado

⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

http://packetstormsecurity.com/files/147183/MikroTik-6.41.4-Denial-Of-Service.html https://www.exploit-db.com/exploits/44450/