medium6.5
CVE-2020-20254
Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process.
Impact
Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mikrotik | Routeros | before 6.47 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2021/May/14
- http://seclists.org/fulldisclosure/2021/May/14
- http://seclists.org/fulldisclosure/2021/May/14
- http://seclists.org/fulldisclosure/2021/May/14
- https://github.com/cq674350529/pocs_slides/blob/master/pocs/MikroTik/vul_lcdstat_2/README.md
- http://seclists.org/fulldisclosure/2021/May/14
- http://seclists.org/fulldisclosure/2021/May/14
- http://seclists.org/fulldisclosure/2021/May/14
- http://seclists.org/fulldisclosure/2021/May/14
- https://github.com/cq674350529/pocs_slides/blob/master/pocs/MikroTik/vul_lcdstat_2/README.md