Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-1157
HistoryAug 23, 2018 - 7:29 p.m.

CVE-2018-1157

2018-08-2319:29:00
CWE-400
[email protected]
web.nvd.nist.gov
6

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.3

Confidence

High

EPSS

0.004

Percentile

73.4%

JSON

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system via a crafted HTTP POST request.

Affected configurations

Nvd
Node
mikrotikrouterosRange<6.40.9ltr
OR
mikrotikrouterosRange<6.42.7
VendorProductVersionCPE
mikrotikrouteros*cpe:2.3:o:mikrotik:routeros:*:*:*:*:ltr:*:*:*
mikrotikrouteros*cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*

Related

cve 1
cvelist 1
nessus 2
prion 1
openvas 2
threatpost 1
thn 1
cve
cve
CVE-2018-1157
2018-08-23 19:29:00
cvelist
cvelist
CVE-2018-1157
2018-08-23 19:00:00
nessus
nessus
MikroTik RouterOS Uncontrolled Resource Consumption (CVE-2018-1157)
2024-02-27 00:00:00
MikroTik RouterOS < 6.40.9 / 6.42.7 / 6.43 multiple vulnerabilities.
2018-08-24 00:00:00
prion
prion
Memory corruption
2018-08-23 19:29:00
openvas
openvas
MikroTik RouterOS Multiple Vulnerabilities
2018-08-24 00:00:00
MikroTik RouterOS < 6.44.5 (LTS), < 6.45.1 (Stable) Multiple DoS Vulnerabilities
2019-07-15 00:00:00
threatpost
threatpost
PoC Attack Escalates MikroTik Router Bug to ‘As Bad As It Gets’
2018-10-08 00:07:04
thn
thn
New Exploit for MikroTik Router WinBox Vulnerability Gives Full Root Access
2018-10-08 15:34:00

CVSS2

6.8

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:S/C:N/I:N/A:C

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

AI Score

6.3

Confidence

High

EPSS

0.004

Percentile

73.4%

JSON
Related for NVD:CVE-2018-1157
cve1cvelist1nessus2prion1openvas2threatpost1thn1