SSH Daemon Denial of Service Vulnerability in MikroTik Routers
CVE-2020-10364
7.5HIGH
Key Information:
Badges
👾 Exploit Exists🟡 Public PoC
What is CVE-2020-10364?
The SSH daemon in MikroTik routers, specifically versions up to v6.44.3, is susceptible to a vulnerability that allows remote attackers to exploit uncontrolled resource management. By executing specific connect and write system calls, attackers can generate excessive CPU activity on the affected device. This can ultimately lead to the denial of new authorized connections, potentially resulting in a complete system reboot. Such vulnerabilities highlight significant concerns for device availability and the importance of maintaining up-to-date firmware.
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.