CVE-2020-20220 – Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption v

Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

 

Source: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-20220

Reference (s):

• FULLDISC:20210511 Four vulnerabilities found in MikroTik’s RouterOS
• URL: http://seclists.org/fulldisclosure/2021/May/23
• http://packetstormsecurity.com/files/162533/MikroTik-RouterOS-Memory-Corruption.html
• https://mikrotik.com/