cve-2018-7445

CRITICAL CVSS 9.8 cisa_known_exploited
Description

In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.

Timeline
Published
2022-09-08
Last Modified
2022-09-08
CVSS Details

CVSS details not available.

Affected Products

No product information available.

References

No references available.

Linked Vulnerabilities

No linked vulnerabilities found.

{
  "cvss": 9.8,
  "datePublished": "2022-09-08",
  "dateUpdated": "2022-09-08",
  "description": "In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.",
  "dueDate": "2022-09-29",
  "id": "CVE-2018-7445",
  "kev_catalogs": [
    "cisa"
  ],
  "knownRansomwareCampaignUse": "Unknown",
  "notes": "https://www.coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow#vendor_update, https://mikrotik.com/download; https://nvd.nist.gov/vuln/detail/CVE-2018-7445",
  "product": "RouterOS",
  "requiredAction": "Apply updates per vendor instructions.",
  "severity": "CRITICAL",
  "source": "cisa_known_exploited",
  "title": "MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability",
  "vendor": "MikroTik"
}
Enrichment data
View JSON API Download JSON