PT-2024-2453 · Mikrotik · Routeros

Published 2024-04-01 · Updated 2026-05-10 · CVE-2024-27686

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS (x86) versions 6.40.5 through 6.49.10

Description An issue in the processing of input data allows a remote attacker to cause a denial of service, resulting in a device crash. This is achieved by sending crafted packet data to the SMB service on TCP port '445'.

Recommendations Update to version 7.

Exploit

Fix

DoS

Resource Exhaustion

RCE

Weakness Enumeration

CWE-400

CWE-20

Related Identifiers

BDU:2024-02431

CVE-2024-27686

Affected Products

Routeros

References · 11

• 🔥 https://github.com/ice-wzl/RouterOS-SMB-DOS-POC · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-27686 · Security Note
• https://bdu.fstec.ru/vul/2024-02431 · Security Note
• https://twitter.com/CVEnew/status/2053559158692065559 · Twitter Post
• https://twitter.com/ExCraft_labs/status/1852327316241727707 · Twitter Post
• https://packetstormsecurity.com/files/177811/RouterOS-6.44-6.49.10-Denial-Of-Service.html · Note
• https://t.me/cybersecuritytechnologies/10253 · Telegram Post
• https://exploit-db.com/exploits/51931 · Note
• https://twitter.com/VulmonFeeds/status/2052676150099382517 · Twitter Post
• https://t.me/cveNotify/162675 · Telegram Post
• https://t.me/breachdetector/497116 · Telegram Post