Denial of Service Vulnerability in Mikrotik RouterOS by Remote Attackers
CVE-2024-27686

7.5HIGH

Key Information:

Vendor

Mikrotik

Status
RouterOS
Vendor
CVE Published:
8 May 2026

What is CVE-2024-27686?

A vulnerability in Mikrotik RouterOS allows remote attackers to exploit weaknesses in the SMB service running on TCP port 445. This can lead to a denial of service, causing the device to crash when it receives specially crafted packet data. Affected versions range from 6.40.5 up to 6.49.10. Users are encouraged to update to version 7, where this issue has been resolved.

References

https://github.com/ice-wzl/RouterOS-SMB-DOS-POC
https://www.exploit-db.com/exploits/51931

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.