PT-2017-17636 · Mikrotik · Mikrotik+1

Farazpajohan · Publicado 2017-03-29 · Atualizado 2017-04-10 · CVE-2017-7285

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MikroTik version 6.38.5

Description A vulnerability in the network stack could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP RST packets, preventing the affected router from accepting new TCP connections.

Recommendations For MikroTik version 6.38.5, consider implementing rate limiting on TCP RST packets to mitigate the risk of CPU exhaustion until a patch is available.

Exploit

Correção

Resource Exhaustion

Enumeração de Fraquezas

CWE-400

Identificadores relacionados

CVE-2017-7285

Produtos afetados

Mikrotik

Mikrotik Routeros

Referências · 5

• 🔥 https://exploit-db.com/exploits/41752 · Exploit
• 🔥 https://cxsecurity.com/issue/WLB-2017030242 · Exploit
• https://osv.dev/vulnerability/CVE-2017-7285 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2017-7285 · Nota de Segurança
• http://securityfocus.com/bid/97266 · Nota