Vulnerabilities > CVE-2020-20214 - Reachable Assertion vulnerability in Mikrotik Routeros 6.44.6
Attack vector
NETWORK Attack complexity
LOW Privileges required
LOW Confidentiality impact
NONE Integrity impact
NONE Availability impact
HIGH Summary
Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
OS | 1 |
Common Weakness Enumeration (CWE)
References
- http://packetstormsecurity.com/files/162513/Mikrotik-RouterOS-6.46.5-Memory-Corruption-Assertion-Failure.html
- http://packetstormsecurity.com/files/162513/Mikrotik-RouterOS-6.46.5-Memory-Corruption-Assertion-Failure.html
- http://seclists.org/fulldisclosure/2021/May/15
- http://seclists.org/fulldisclosure/2021/May/15
- http://seclists.org/fulldisclosure/2021/May/15
- http://seclists.org/fulldisclosure/2021/May/15
- https://mikrotik.com/
- https://mikrotik.com/