PT-2017-14847 · Mikrotik · Routerboard

Published 2017-12-13 · Updated 2018-01-12 · CVE-2017-17537

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions MikroTik RouterBOARD versions 6.39.2 through 6.40.5

Description The issue allows an unauthenticated remote attacker to cause a denial of service. This can be achieved by connecting to TCP port 53 and sending data that begins with many '0' characters, which is possibly related to DNS.

Recommendations For versions 6.39.2 through 6.40.5, consider restricting access to TCP port 53 as a temporary workaround to minimize the risk of exploitation.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2017-17537

Affected Products

Routerboard

References · 3

• 🔥 https://exploit-db.com/exploits/43200 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2017-17537 · Security Note
• https://osv.dev/vulnerability/CVE-2017-17537 · Vendor Advisory