CVE-2023-30800

CVSS V2 None CVSS V3 None

Description

The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected.

Overview

CVE ID
CVE-2023-30800

Assigner
VulnCheck

Vulnerability Status
PUBLISHED

Published Version
2023-09-07T15:43:54.429Z

Last Modified Date
2023-09-07T15:43:54.429Z

Weakness Enumerations

CWE	URL
CWE-787	http://cwe.mitre.org/data/definitions/787.html

References

Reference URL	Reference Tags
https://vulncheck.com/advisories/mikrotik-jsproxy-dos

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2023-30800
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-30800

History

Created	Old Value	New Value	Data Type	Notes
2024-06-25 17:14:10				Added to TrackCVE