Vulnerabilities > CVE-2023-30800 - Out-of-bounds Write vulnerability in Mikrotik Routeros

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

NONE

Integrity impact

NONE

Availability impact

HIGH

network

low complexity

mikrotik

CWE-787

NVD

Published: 2023-09-07

Updated: 2023-09-12

Summary

The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected.

Vulnerable Configurations

Part	Description	Count
OS	Mikrotik Mikrotik Routeros 6.0 Mikrotik Routeros 6.1 Mikrotik Routeros 6.2 Mikrotik Routeros 6.3 Mikrotik Routeros 6.4 Mikrotik Routeros 6.5 Mikrotik Routeros 6.6 Mikrotik Routeros 6.7 Mikrotik Routeros 6.9 Mikrotik Routeros 6.10 Mikrotik Routeros 6.11 Mikrotik Routeros 6.12 Mikrotik Routeros 6.13 Mikrotik Routeros 6.14 Mikrotik Routeros 6.15 Mikrotik Routeros 6.16 Mikrotik Routeros 6.17 Mikrotik Routeros 6.18 Mikrotik Routeros 6.19 Mikrotik Routeros 6.20 Mikrotik Routeros 6.21.1 Mikrotik Routeros 6.22 Mikrotik Routeros 6.23 Mikrotik Routeros 6.24 Mikrotik Routeros 6.25 Mikrotik Routeros 6.26 Mikrotik Routeros 6.27 Mikrotik Routeros 6.28 Mikrotik Routeros 6.29 Mikrotik Routeros 6.29.1 Mikrotik Routeros 6.30 Mikrotik Routeros 6.30.1 Mikrotik Routeros 6.30.2 Mikrotik Routeros 6.30.4 Mikrotik Routeros 6.32.1 Mikrotik Routeros 6.32.2 Mikrotik Routeros 6.32.3 Mikrotik Routeros 6.32.4 Mikrotik Routeros 6.33 Mikrotik Routeros 6.33.1 Mikrotik Routeros 6.33.2 Mikrotik Routeros 6.33.3 Mikrotik Routeros 6.33.5 Mikrotik Routeros 6.33.6 Mikrotik Routeros 6.34 Mikrotik Routeros 6.34.1 Mikrotik Routeros 6.34.2 Mikrotik Routeros 6.34.3 Mikrotik Routeros 6.34.4 Mikrotik Routeros 6.34.5 Mikrotik Routeros 6.34.6 Mikrotik Routeros 6.35 Mikrotik Routeros 6.35.1 Mikrotik Routeros 6.35.2 Mikrotik Routeros 6.35.4 Mikrotik Routeros 6.36 Mikrotik Routeros 6.36.1 Mikrotik Routeros 6.36.2 Mikrotik Routeros 6.36.3 Mikrotik Routeros 6.36.4 Mikrotik Routeros 6.37 Mikrotik Routeros 6.37.1 Mikrotik Routeros 6.37.2 Mikrotik Routeros 6.37.3 Mikrotik Routeros 6.37.4 Mikrotik Routeros 6.37.5 Mikrotik Routeros 6.38 Mikrotik Routeros 6.38.1 Mikrotik Routeros 6.38.2 Mikrotik Routeros 6.38.3 Mikrotik Routeros 6.38.4 Mikrotik Routeros 6.38.5 Mikrotik Routeros 6.38.7 Mikrotik Routeros 6.39 Mikrotik Routeros 6.39.1 Mikrotik Routeros 6.39.2 Mikrotik Routeros 6.39.3 Mikrotik Routeros 6.40 Mikrotik Routeros 6.40.1 Mikrotik Routeros 6.40.2 Mikrotik Routeros 6.40.3 Mikrotik Routeros 6.40.4 Mikrotik Routeros 6.40.5 Mikrotik Routeros 6.40.6 Mikrotik Routeros 6.40.7 Mikrotik Routeros 6.40.8 Mikrotik Routeros 6.40.9 Mikrotik Routeros 6.41 Mikrotik Routeros 6.41.1 Mikrotik Routeros 6.41.2 Mikrotik Routeros 6.41.3 Mikrotik Routeros 6.41.4 Mikrotik Routeros 6.42 Mikrotik Routeros 6.42.1 Mikrotik Routeros 6.42.2 Mikrotik Routeros 6.42.3 Mikrotik Routeros 6.42.4 Mikrotik Routeros 6.42.5 Mikrotik Routeros 6.42.6 Mikrotik Routeros 6.42.7 Mikrotik Routeros 6.42.9 Mikrotik Routeros 6.43 Mikrotik Routeros 6.43.1 Mikrotik Routeros 6.43.2 Mikrotik Routeros 6.43.3 Mikrotik Routeros 6.43.4 Mikrotik Routeros 6.43.5 Mikrotik Routeros 6.43.6 Mikrotik Routeros 6.43.7 Mikrotik Routeros 6.43.8 Mikrotik Routeros 6.43.9 Mikrotik Routeros 6.43.10 Mikrotik Routeros 6.43.11 Mikrotik Routeros 6.43.12 Mikrotik Routeros 6.44 Mikrotik Routeros 6.44.1 Mikrotik Routeros 6.44.2 Mikrotik Routeros 6.44.3 Mikrotik Routeros 6.44.4 Mikrotik Routeros 6.44.5 Mikrotik Routeros 6.45 Mikrotik Routeros 6.45.1 Mikrotik Routeros 6.45.2 Mikrotik Routeros 6.45.3 Mikrotik Routeros 6.45.4 Mikrotik Routeros 6.45.5 Mikrotik Routeros 6.45.6 Mikrotik Routeros 6.46.4 Mikrotik Routeros 6.46.5 Mikrotik Routeros 6.47	155

Common Weakness Enumeration (CWE)

CWE-787 - Out-of-bounds Write

References

https://vulncheck.com/advisories/mikrotik-jsproxy-dos