Vulnerability Details : CVE-2018-5951
Potential exploit
An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack.
Products affected by CVE-2018-5951
- cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*
Exploit prediction scoring system (EPSS) score for CVE-2018-5951
18.13%
Probability of exploitation activity in the next 30 days
EPSS Score History
~ 95 %
Percentile, the proportion of vulnerabilities that are scored at or less
CVSS scores for CVE-2018-5951
| Base Score | Base Severity | CVSS Vector | Exploitability Score | Impact Score | Score Source | First Seen |
|---|---|---|---|---|---|---|
|
7.1
|
HIGH | AV:N/AC:M/Au:N/C:N/I:N/A:C |
8.6
|
6.9
|
NIST | |
|
7.5
|
HIGH | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H |
3.9
|
3.6
|
NIST |
References for CVE-2018-5951
-
https://github.com/Nat-Lab/CVE-2018-5951
GitHub - Nat-Lab/CVE-2018-5951: MikroTik RouterOS Denial of Service VulnerabilityExploit;Third Party Advisory
Jump to