CVEvulnerability
CVE-2019-13074
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-07-03
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 7.5 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- CVSS 2.0 ([email protected])
- 7.8 HIGH — AV:N/AC:L/Au:N/C:N/I:N/A:C
- Weaknesses
- CWE-770
Description
A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all available memory, causing the device to reboot because of uncontrolled resource management.
Affected configurations
• mikrotik routeros (<= 6.44.3)
Related
Weakness · CWE (1)
- CWE-770 Allocation of Resources Without Limits or Throttling weakness
References
- https://forum.mikrotik.com/viewtopic.php?t=150045 Vendor Advisory
- https://mikrotik.com/download/changelogs/stable-release-tree Release Notes, Vendor Advisory
- https://forum.mikrotik.com/viewtopic.php?t=150045 Vendor Advisory
- https://mikrotik.com/download/changelogs/stable-release-tree Release Notes, Vendor Advisory