{"cvss":0.0,"datePublished":"2018-03-28T00:00:00Z","dateUpdated":"2018-03-28T00:00:00Z","description":"The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP request. An attacker can use this vulnerability to execute arbitrary code on the affected system, as exploited in the wild in mid-2017 and later.","dueDate":"","id":"CVE-2017-20149","kev_catalogs":["vulncheck"],"knownRansomwareCampaignUse":"Unknown","product":"RouterOS","requiredAction":"Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.","severity":"HIGH","source":"vulncheck_kev","title":"MikroTik RouterOS Out-of-bounds Write","vendor":"MikroTik"}