PT-2018-1702 · Mikrotik · Routeros+1

Published 2018-08-23 · Updated 2019-07-23 · CVE-2018-1157

Positive Technologies (AI Summary)

CVSS v2.0

6.8

Medium

Base vector

AV:N/AC:L/Au:S/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS versions prior to 6.42.7 Mikrotik RouterOS versions prior to 6.40.9

Description The issue is related to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server and, in some cases, reboot the system by sending a crafted HTTP POST request. The vulnerability can be exploited via the "/jsproxy/upload" API endpoint, allowing a remote attacker to cause a denial of service or reboot the device by uploading a file that exhausts available memory.

Recommendations For versions prior to 6.42.7, update to version 6.42.7 or later. For versions prior to 6.40.9, update to version 6.40.9 or later. As a temporary workaround, consider restricting access to the /jsproxy/upload API endpoint to minimize the risk of exploitation.

Exploit

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2018-01262

CVE-2018-1157

Affected Products

Mikrotik Routeros

Routeros

References · 9

• 🔥 https://github.com/tenable/routeros/tree/master/poc/cve_2018_1157 · Exploit
• 🔥 https://tenable.com/security/research/tra-2018-21 · Exploit
• https://osv.dev/vulnerability/CVE-2018-1157 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-1157 · Security Note
• https://mikrotik.com/download/changelogs/bugfix-release-tree · Vendor Advisory
• https://mikrotik.com/download/changelogs · Vendor Advisory
• https://bdu.fstec.ru/vul/2018-01262 · Security Note
• https://blog.mikrotik.com/security/security-issues-discovered-by-tenable.html · Note
• http://seclists.org/fulldisclosure/2019/Jul/20 · Note