PT-2022-11520
CVE-2021-41987
·
تاريخ النشر
2022-03-16
·
تاريخ التحديث
2026-10-21
الوصف من
CVSS 3.1
8.1
عاليةالمقاييسAV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Mikrotik RouterOS versions 6.46.8 through 6.47.10
Description
A heap-based buffer overflow issue exists in the SCEP Server of RouterOS, allowing an attacker to trigger remote code execution. The attacker must be aware of the
scep server name value to exploit this issue.Recommendations
For versions 6.46.8 through 6.47.10, consider disabling the SCEP Server functionality until a patch is available to prevent potential remote code execution.
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾