CVE-2020-10364 - The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management

Back Back to CVE browser

HIGH

The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management

Published Mar 23, 2020

7.5

HIGH

CVSS 3.1

EPSS 2.66%

Description

The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-770

Allocation of Resources Without Limits

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2819
Advisory
https://packetstormsecurity.com/files/156790/Microtik-SSH-Daemon-6.44.3-Denial-Of-Service.html
x_refsource_MISCExploitMitigationThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/48228
x_refsource_MISCExploitMitigationThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-2819		Advisory
https://packetstormsecurity.com/files/156790/Microtik-SSH-Daemon-6.44.3-Denial-Of-Service.html		x_refsource_MISCExploitMitigationThird Party AdvisoryVDB Entry
https://www.exploit-db.com/exploits/48228		x_refsource_MISCExploitMitigationThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Mar 23, 2020

Updated Aug 4, 2024

Reserved Mar 10, 2020

Link CVE-2020-10364

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-10364

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Mar 23, 2020

Updated Aug 4, 2024

Link EUVD-2020-2819

GitHub

No data