Lucene search

[email protected]NVD:CVE-2020-20215

HistoryJul 07, 2021 - 2:15 p.m.

CVE-2020-20215

2021-07-0714:15:09

CWE-787

[email protected]

web.nvd.nist.gov

mikrotik

routeros

memory corruption

vulnerability

denial of service

remote attacker

invalid memory access

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

50.1%

JSON

Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access.

Affected configurations

Nvd

Node

mikrotikrouterosMatch6.44.6ltr

VendorProductVersionCPE
mikrotikrouteros6.44.6cpe:2.3:o:mikrotik:routeros:6.44.6:*:*:*:ltr:*:*:*

Vendor	Product	Version	CPE
mikrotik	routeros	6.44.6	cpe:2.3:o:mikrotik:routeros:6.44.6::::ltr:::

References

seclists.org/fulldisclosure/2021/May/10

mikrotik.com/

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:N/I:N/A:P

CVSS3

6.5

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

EPSS

0.001

Percentile

50.1%

JSON

Related for NVD:CVE-2020-20215

cve1 nessus1 prion1 cvelist1 openvas1