high7.5
CVE-2024-54952
MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability.
Impact
MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote, unauthenticated attackers can exploit this issue by sending specially crafted packets, triggering a null pointer dereference. This leads to a Remote Denial of Service (DoS), rendering the SMB service unavailable.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mikrotik | Routeros | Version 6.40.5 |