CVE-2020-10364

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions through 6.44.3

Description The issue is related to uncontrolled resource management in the SSH daemon of MikroTik routers. This could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls.

Recommendations For versions through 6.44.3, update to a version later than 6.44.3 to resolve the issue. As a temporary workaround, consider restricting access to the SSH daemon to minimize the risk of exploitation.