CVE-2021-41987

Katalog CVE

CVSS 8.1 · High EPSS 16,2%

Kerentanan Out-of-bounds Write pada mikrotik routeros. Skor CVSS 3.1 8.1 (High) menurut NVD.

Deskripsi (NVD)

In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scep_server_name value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10.

Rincian

Terbit di NVD

16 Maret 2022

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.1 (High), sumber NVD
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-787: Out-of-bounds Write

EPSS (30 hari)

16,2% peluang dieksploitasi; lebih tinggi dari 96,8% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://mikrotik.com/download/archive release notes · advisory vendor
• https://teamt5.org/en/posts/vulnerability-mikrotik-cve-2021-41987/ exploit · advisory pihak ketiga