MikroTik RouterOS HTTP Stack-based Buffer Overflow (Chimay-Red)

Advisories

severity: critical
date: October 14, 2022
Affecting: MikroTik RouterOS stable before 6.38.5
MikroTik RouterOS long-term before 6.37.5
CVE: CVE-2017-20149
CVE type: Stack-based Buffer Overflow
CVSS: 9.8
CVSS V3 Vector: AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References: Exploit
GreyNoise