VYPR
← All advisories
Medium severity6.5NVD Advisory· Published Aug 23, 2018· Updated Jun 17, 2026

CVE-2018-1157

CVE-2018-1157

Description

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server and in some circumstances reboot the system via a crafted HTTP POST request.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3
  • Mikrotik/Routeros3 versions
    cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*+ 2 more
    • cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*range: <6.42.7
    • cpe:2.3:o:mikrotik:routeros:*:*:*:*:ltr:*:*:*range: <6.40.9
    • (no CPE)range: <6.42.7, <6.40.9

Patches

Vulnerability mechanics

References

4

News mentions

0

No linked articles in our index yet.