high7.5Public exploit code
CVE-2018-10070
A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a craft…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MikroTik 6.41.4 - FTP daemon Denial of Service (PoC)2018-04-13 · dos · linux
Impact
A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sending a crafted FTP request on port 21 that begins with many '\0' characters, preventing the affected router from accepting new FTP connections. The router will reboot after 10 minutes, logging a "router was rebooted without proper shutdown" message.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mikrotik | Router Firmware | Version 6.41.4 |