CVE-2019-13955

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS versions prior to 6.44.5

Description The issue is related to uncontrolled resource consumption, which can be exploited by sending a crafted HTTP request, allowing an authenticated remote attacker to crash the HTTP server via recursive parsing of JSON. This can lead to a denial of service.

Recommendations For versions prior to 6.44.5, update to version 6.44.5 or later to resolve the issue.