PT-2018-2689 · Mikrotik · Routeros

Publicado 2018-11-15 · Atualizado 2019-04-08 · CVE-2018-19298

Positive Technologies (AI Summary)

CVSS v2.0

7.8

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions RouterOS (affected versions not specified)

Description The issue is related to errors in the watchdog timer of the RouterOS operating system. It allows a remote attacker to reboot a vulnerable device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Enumeração de Fraquezas

CWE-399

CWE-400

Identificadores relacionados

BDU:2019-01357

BDU:2019-01358

CVE-2018-19298

Produtos afetados

Routeros

Referências · 6

• https://t.me/sysadm_in_channel/804 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2019-01358 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-01357 · Nota de Segurança
• https://blog.mikrotik.com/software/cve-2018-19298-cve-2018-19299-ipv6-resource-exhaustion.html · Nota
• https://xakep.ru/2019/04/08/mikrotik-dos · Nota
• https://securitylab.ru/news/498664.php · Nota