Unrated severityNVD Advisory· Published May 29, 2025· Updated May 29, 2025

CVE-2024-54952

Description

MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote, unauthenticated attackers can exploit this issue by sending specially crafted packets, triggering a null pointer dereference. This leads to a Remote Denial of Service (DoS), rendering the SMB service unavailable.

Affected products

Mikrotik/Routeroscpe-rescue2 versions
(expand)+ 1 more
- (no CPE)
- (no CPE)range: 6.40.5

Patches

Vulnerability mechanics

References

github.com/noobone123/RouterOS-issues/blob/main/README.mdmitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000