PT-2018-2689 · Mikrotik · Routeros

Published 2018-11-15 · Updated 2019-04-08 · CVE-2018-19298

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions RouterOS (affected versions not specified)

Description The issue is related to errors in the watchdog timer of the RouterOS operating system. It allows a remote attacker to reboot a vulnerable device.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-399

CWE-400

Related Identifiers

BDU:2019-01357

BDU:2019-01358

CVE-2018-19298

Affected Products

Routeros

References · 6

• https://bdu.fstec.ru/vul/2019-01358 · Security Note
• https://bdu.fstec.ru/vul/2019-01357 · Security Note
• https://t.me/sysadm_in_channel/804 · Telegram Post
• https://blog.mikrotik.com/software/cve-2018-19298-cve-2018-19299-ipv6-resource-exhaustion.html · Note
• https://xakep.ru/2019/04/08/mikrotik-dos · Note
• https://securitylab.ru/news/498664.php · Note