Medium severity6.5NVD Advisory· Published Aug 23, 2018· Updated Jun 17, 2026

CVE-2018-1158

Description

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a stack exhaustion vulnerability. An authenticated remote attacker can crash the HTTP server via recursive parsing of JSON.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mikrotik/Routerosllm-fuzzy
Range: 6.42.7, 6.40.9

Patches

Vulnerability mechanics

References

www.tenable.com/security/research/tra-2018-21nvdExploitThird Party Advisory
mikrotik.com/download/changelogsnvdVendor Advisory
mikrotik.com/download/changelogs/bugfix-release-treenvdVendor Advisory
seclists.org/fulldisclosure/2019/Jul/20nvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000