PT-2025-23197 · Mikrotik · Mikrotik Routeros

Published 2024-11-21 · Updated 2025-06-30 · CVE-2024-54952

Positive Technologies (AI Summary)

CVSS v2.0

7.8

High

Base vector

AV:N/AC:L/Au:N/C:N/I:N/A:C

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS version 6.40.5

Description The SMB service in MikroTik RouterOS contains a memory corruption issue. Remote, unauthenticated attackers can exploit this by sending specially crafted packets, triggering a null pointer dereference. This leads to a Remote Denial of Service (DoS), rendering the SMB service unavailable.

Recommendations For MikroTik RouterOS version 6.40.5, consider disabling the SMB service until a patch is available to prevent Remote Denial of Service (DoS) attacks.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BDU:2025-06641

CVE-2024-54952

Affected Products

Mikrotik Routeros

References · 10

• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2024-54952 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2024-54952 · Security Note
• https://osv.dev/vulnerability/CVE-2024-54952 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-06641 · Security Note
• https://twitter.com/CVEnew/status/1928177129386053792 · Twitter Post
• https://t.me/cvetracker/24926 · Telegram Post
• https://twitter.com/cybercronai/status/1928323098614337559 · Twitter Post
• https://github.com/noobone123/RouterOS-issues/blob/main/README.md · Note
• https://t.me/cvenotify/127114 · Telegram Post
• https://twitter.com/VulmonFeeds/status/1928231572009894110 · Twitter Post