CVE Feed

    Dashboard / CVE / CVE-2020-10364

    CVE-2020-10364

    The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management.

    Published:Mar 23, 2020
    Last Modified:Nov 21, 2024
    EPS:Mar 23, 2020
    EPSS Score:0.02072
    CVSS Score:7.5

    Affected Products

    Vendor
    Mikrotik
    Product
    Ccr1009-7g-1c-1s\+
    Vendor
    Mikrotik
    Product
    Ccr1009-7g-1c-1s\+pc
    Vendor
    Mikrotik
    Product
    Ccr1009-7g-1c-pc
    Vendor
    Mikrotik
    Product
    Ccr1016-12g
    Vendor
    Mikrotik
    Product
    Ccr1016-12s-1s\+
    Vendor
    Mikrotik
    Product
    Ccr1036-12g-4s
    Vendor
    Mikrotik
    Product
    Ccr1036-12g-4s-em
    Vendor
    Mikrotik
    Product
    Ccr1036-8g-2s\+
    Vendor
    Mikrotik
    Product
    Ccr1036-8g-2s\+em
    Vendor
    Mikrotik
    Product
    Ccr1072-1g-8s\+
    Vendor
    Mikrotik
    Product
    Hex
    Vendor
    Mikrotik
    Product
    Hex Lite
    Vendor
    Mikrotik
    Product
    Hex Poe
    Vendor
    Mikrotik
    Product
    Hex Poe Lite
    Vendor
    Mikrotik
    Product
    Hex S
    Vendor
    Mikrotik
    Product
    Powerbox
    Vendor
    Mikrotik
    Product
    Powerbox Pro
    Vendor
    Mikrotik
    Product
    Rb1100ahx4
    Vendor
    Mikrotik
    Product
    Rb2011il-in
    Vendor
    Mikrotik
    Product
    Rb2011il-rm
    Vendor
    Mikrotik
    Product
    Rb2011ils-in
    Vendor
    Mikrotik
    Product
    Rb2011uias-in
    Vendor
    Mikrotik
    Product
    Rb2011uias-rm
    Vendor
    Mikrotik
    Product
    Rb3011uias-rm
    Vendor
    Mikrotik
    Product
    Rb4011igs\+rm
    Vendor
    Mikrotik
    Product
    Routeros

    Exploits

    https://packetstormsecurity.com/files/156790/Microtik-SSH-Daemon-6.44.3-Denial-Of-Service.htmlhttps://www.exploit-db.com/exploits/48228https://packetstormsecurity.com/files/156790/Microtik-SSH-Daemon-6.44.3-Denial-Of-Service.htmlhttps://www.exploit-db.com/exploits/48228

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High