CVE-2020-20262

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOs versions prior to 6.47

Description The issue is related to an assertion failure vulnerability in the /ram/pckg/security/nova/bin/ipsec process. An authenticated remote attacker can cause a Denial of Service due to an assertion failure via a crafted packet. The vulnerability is associated with the use of the assert() function or a similar operator, allowing a remote attacker to exploit it and cause a service disruption.

Recommendations For versions prior to 6.47, update to version 6.47 or later to resolve the issue. As a temporary workaround, consider restricting access to the /ram/pckg/security/nova/bin/ipsec process to minimize the risk of exploitation.