CVE-2020-20254

Name of the Vulnerable Software and Affected Versions: Mikrotik RouterOs versions prior to 6.47

Description: The issue is related to a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference) by exploiting this vulnerability.

Recommendations: For versions prior to 6.47, update to version 6.47 or later to resolve the issue. As a temporary workaround, consider restricting access to the /nova/bin/lcdstat process to minimize the risk of exploitation.