high7.5Public exploit code
CVE-2017-6444
The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote att…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MikroTik Router - ARP Table OverFlow Denial Of Service2017-03-05 · dos · hardware
Impact
The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many ACK packets. After the attacker stops the exploit, the CPU usage is 100% and the router requires a reboot for normal operation.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mikrotik | Routeros | Version 6.25 |
Weakness classification
References
- NVD record
- CVE.org record
- http://www.exploitalert.com/view-details.html?id=26137
- https://cxsecurity.com/issue/WLB-2017030029
- https://packetstormsecurity.com/files/141449/Mikrotik-Hap-Lite-6.25-Denial-Of-Service.html
- https://www.exploit-db.com/exploits/41601/
- http://www.exploitalert.com/view-details.html?id=26137
- https://cxsecurity.com/issue/WLB-2017030029
- https://packetstormsecurity.com/files/141449/Mikrotik-Hap-Lite-6.25-Denial-Of-Service.html
- https://www.exploit-db.com/exploits/41601/