CVE-2020-20236: Medium severity mikrotik routeros vulnerability

Published May 18, 2021

Updated

Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service due to improper memory access.

Affected Software

1 affected component

Mikrotik RouterOS=6.46.3

Event History

May 18, 2021

CVE Published

via MITRE·06:22 PM

Data Sourced

via MITRE·06:22 PM

Description

Frequently Asked Questions

What is the vulnerability ID of this issue?

The vulnerability ID of this issue is CVE-2020-20236.

What is the severity level of CVE-2020-20236?

CVE-2020-20236 has a severity level of medium (6.5).

Which version of MikroTik RouterOS is affected by CVE-2020-20236?

MikroTik RouterOS version 6.46.3 is affected by CVE-2020-20236.

How can an attacker exploit this vulnerability?

An authenticated remote attacker can exploit this vulnerability by causing a Denial of Service due to improper memory access.

Are there any references available for CVE-2020-20236?

Yes, you can find references for CVE-2020-20236 at the following URLs: [1](http://packetstormsecurity.com/files/162513/Mikrotik-RouterOS-6.46.5-Memory-Corruption-Assertion-Failure.html), [2](http://seclists.org/fulldisclosure/2021/May/15), [3](https://mikrotik.com/).