Denial of Service
Vulnerabilities that block or restart the router or one of its services: all dojo articles on this topic.
Denial of Service on the FTP service in RouterOS
CVE-2018-10070 is an Uncontrolled Resource Consumption vulnerability that allows a remote unauthenticated attacker to exhaust the router's CPU and RAM by sending malicious FTP requests. The affected device is MikroTik Version 6.41.4, which reboots after approximately 10 minutes. To protect yourself, you must update the firmware to a later version or disable the FTP service if it is not strictly necessary.
SecurityDenial of Service via ICMP on RouterOS v6.40.5
The CVE-2017-17538 vulnerability allows a remote attacker to cause a denial of service by sending a massive sequence of ICMP packets. It affects MikroTik devices running RouterOS version 6.40.5. To mitigate the risk, you must update the firmware to a later version or apply network filters to limit ICMP traffic.
SecurityDoS on hAP Lite 6.25 via ACK packets
CVE-2017-6444 is a denial-of-service vulnerability affecting the MikroTik Router hAP Lite device running firmware 6.25. A remote attacker can saturate the CPU by sending unsolicited TCP ACK packets, rendering the router unusable until it is rebooted. Since no fixed versions have been announced, the only certain mitigation is to isolate the device from untrusted networks or replace it.
SecuritySNMP Vulnerability in RouterOS 3.2
CVE-2008-0680 is a vulnerability that allows a remote attacker to cause the SNMP daemon to crash by sending a malicious SNMP SET request. It affects MikroTik RouterOS version 3.2 and earlier. To mitigate the risk, you must update the operating system to a later version or disable the SNMP service if it is not used.