CVE Catalog

CVE-2017-7285

High
Published: Translated: NVD NIST

Summary

A vulnerability in the network stack of MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP RST packets, preventing the affected router from accepting new TCP connections.

Risk Assessment

An attacker could cause the router to become unavailable, leading to a disruption of network services within the organization.

Recommendation

It is recommended to update MikroTik software to the latest version to mitigate this vulnerability and to monitor network traffic for potential attacks.

Other vulnerabilities in MikroTik Version 6.38.5

Original NVD description (English source)

A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP RST packets, preventing the affected router from accepting new TCP connections.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS