VYPR

SCEP Server

by Mikrotik

CVEs (1)

  • CVE-2021-41987HigMar 16, 2022
    risk 0.54cvss 8.1epss 0.16

    In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scep_server_name value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10.