CVE-2023-30800highCWE-787

CVE-2023-30800: falha de alta gravidade em MikroTik RouterOS

MikroTik RouterOS Web Interface Heap Corruption

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar RouterOS

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.5epss 1.7%
The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Produtos afetados
MikroTik · RouterOS
CVEs relacionadas — MikroTik RouterOS

No mesmo produto, das mais perigosas para as menos.

CVE-2019-3943—CVE-2019-3943EPSS 3.7%CVE-2023-30799CRITICALMikroTik RouterOS Administrator Privilege EscalationEPSS 1.4%CVE-2025-10948HIGHMikroTik RouterOS libjson.so print parse_json_element buffer overflowEPSS 1.0%CVE-2026-84411CRITICALMikroTik RouterOS Integer UnderflowEPSS 0.9%CVE-2025-6563MEDIUMCross-site scripting via dst parameter in RouterOS WiFi hotspotEPSS 0.7%CVE-2026-89028HIGHMikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndXEPSS 0.6%