CVE-2017-20149
CRITICAL EXPLOITED IN THE WILDMikrotik RouterOS <6.38.5 - Long-term 6.37.5 - Memory Corruption
Title source: llmExploitation Summary
CVE-2017-20149 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 1 public exploit.
AI-analyzed exploit summary This repository contains a functional exploit for CVE-2017-20149, targeting MikroTik RouterOS versions 6.x < 6.38.5. The exploit leverages a memory corruption vulnerability in the www service to achieve remote code execution (RCE) via ROP chains, with support for x86 and MIPS architectures.
Description
The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP request. An attacker can use this vulnerability to execute arbitrary code on the affected system, as exploited in the wild in mid-2017 and later.
Exploits (1)
This repository contains a functional exploit for CVE-2017-20149, targeting MikroTik RouterOS versions 6.x < 6.38.5. The exploit leverages a memory corruption vulnerability in the www service to achieve remote code execution (RCE) via ROP chains, with support for x86 and MIPS architectures.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H