CVE-2023-30800
High
Description
The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected.
SeverityHigh
CVSS7.5
Exploit probability—
Product
Mikrotik Routeros
PublishedSep 7, 2023
First seenSep 7, 2023
Weakness typeCWE-787Out-of-bounds write
How to fix
Update
- mikrotik routeros6.49.10 or later
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| mikrotik routeros | 6.0 ≤ v < 6.49.10 | 6.49.10 |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.