themehackers/cve-2024-27686This document describes a Denial of Service (DoS) vulnerability found in certain versions of MikroTik RouterOS. The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by sending a specially crafted request to the target server.
This document describes a Denial of Service (DoS) vulnerability found in certain versions of MikroTik RouterOS.
The vulnerability is due to insufficient handling of crafted SMB requests. A remote attacker could exploit this issue by sending a specially crafted request to the target server.
✅ Successful exploitation could result in the crash or unresponsiveness of the affected system.
| Product | Affected Versions |
|---|---|
| MikroTik RouterOS | 6.40.5 to 6.44 |
| MikroTik RouterOS | 6.48.1 to 6.49.10 |
| IPS Database | Status |
|---|---|
| IPS (Regular DB) | ✅ Covered |
| IPS (Extended DB) | ✅ Covered |
| Date | Version | Detail |
|---|---|---|
| 2024-06-03 | 28.799 | Default action: pass:drop |
| 2024-05-23 | 27.792 | Initial detection added |
ℹ️ Always keep your systems up to date and monitor vendor advisories for future patches or improvements.
