CVE-2018-1158

CVSS 3.0: 6.5 medium
EPSS: 2%p84
Published: Aug 23, 2018 · Aug 23, 2018
Modified: Jun 17, 2026

Analyze CVE-2018-1158 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server via recursive parsing of JSON.

Vendors: mikrotik

Products: routeros

Weakness: CWE-674

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (2.5%)

In the news

3 stories

Description · NVD

In the news

New Exploit for MikroTik Router WinBox Vulnerability Gives Full Root Access

Expert presented a new attack technique to compromise MikroTik Routers

MikroTik routers with default credentials can be easily compromised