CVE-2021-41987

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS versions 6.46.8 through 6.47.10

Description A heap-based buffer overflow issue exists in the SCEP Server of RouterOS, allowing an attacker to trigger remote code execution. The attacker must be aware of the scep server name value to exploit this issue.

Recommendations For versions 6.46.8 through 6.47.10, consider disabling the SCEP Server functionality until a patch is available to prevent potential remote code execution.