CVE-2020-20225

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions prior to 6.47

Description: The issue is related to an assertion failure vulnerability in the /nova/bin/user process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet.

Recommendations: For versions prior to 6.47, update to version 6.47 or later to resolve the issue. As a temporary workaround, consider restricting access to the /nova/bin/user process to minimize the risk of exploitation.