CVE-2018-1156HIGH
Description
Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface. This vulnerability could theoretically allow a remote authenticated attacker execute arbitrary code on the system.
References
https://mikrotik.com/download/changelogs
https://mikrotik.com/download/changelogs/bugfix-release-tree
Details
Source: MITRE
Published: 2018-08-23
Updated: 2020-08-24
Type: CWE-787
Risk Information
CVSS v2.0
Base Score: 9
Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C
Impact Score: 10
Exploitability Score: 8
Severity: HIGH
CVSS v3.0
Base Score: 8.8
Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Impact Score: 5.9
Exploitability Score: 2.8
Severity: HIGH
Vulnerable Software
Configuration 1
OR