Mikrotik: >> Routeros >> 6.38.5 Security Vulnerabilities
A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 (used for L2TP over IPsec), preventing the affected router from accepting new connections; all devices will be disconnected from the router and all logs removed automatically.
CVSS Score
7.5
EPSS Score
0.042
Published
2017-05-18
A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of TCP RST packets, preventing the affected router from accepting new TCP connections.
CVSS Score
7.5
EPSS Score
0.193
Published
2017-03-29
Page 6