CyberRota Analysis
AI-GeneratedThe web management service in certain RouterOS versions is vulnerable due to an integer underflow in its HTTP request body handling, which can be exploited by unauthenticated attackers. This flaw allows for arbitrary code execution with root privileges or can lead to a denial of service through a single crafted request. Network administrators and organizations using affected RouterOS versions should prioritize immediate remediation to mitigate the risk of exploitation.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution as root, or to cause a denial of service, using a single crafted request.