PT-2018-2690 · Mikrotik · Routeros

Published 2018-11-15 · Updated 2019-04-08 · CVE-2018-19299

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions RouterOS (affected versions not specified)

Description The issue is caused by errors in handling the device's cache memory, allowing a remote attacker to cause a denial of service.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

BDU:2019-01358

CVE-2018-19299

Affected Products

Routeros

References · 5

• https://bdu.fstec.ru/vul/2019-01358 · Security Note
• https://t.me/sysadm_in_channel/804 · Telegram Post
• https://blog.mikrotik.com/software/cve-2018-19298-cve-2018-19299-ipv6-resource-exhaustion.html · Note
• https://xakep.ru/2019/04/08/mikrotik-dos · Note
• https://securitylab.ru/news/498664.php · Note