CVE-2019-13954

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS versions prior to 6.44.5

Description The issue is related to memory exhaustion, where an authenticated remote attacker can crash the HTTP server and potentially reboot the system by sending a crafted HTTP request. This can lead to a denial of service. There is no mention of the estimated number of potentially affected devices or real-world incidents.

Recommendations For versions prior to 6.44.5, update to version 6.44.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the HTTP server to minimize the risk of exploitation.