Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-30800

MikroTik RouterOS Web Interface Heap Corruption

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
VulnCheck

Description

The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

MikroTik RouterOS

Default version status: affected

  • 6.49.10unaffected
  • 6.49.9affected
  • 6.48.8affected

References