CVE-2020-11881

PoC —

CVSS 3.1

7.5 high

EPSS

4%p89

Published

Sep 14, 2020 (Sep 14, 2020)

Modified

Jun 17, 2026

Description

An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-request packets, aka SUP-12964.

Vendors: mikrotik
Products: routeros
Weakness: CWE-129
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

NVD CVE.org GitHub PoCs EPSS (3.8%)

In the news0 stories

No ingested article mentions this CVE yet.