CVE-2021-36613

Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-05-11

Last modified

2024-08-04

Weaknesses

CWE-476

Affected products

• Routeros (Mikrotik)

References

• http://seclists.org/fulldisclosure/2022/Jun/2
• https://seclists.org/fulldisclosure/2021/Jul/0