ID de Prueba:	1.3.6.1.4.1.25623.1.0.143630
Categoría:	Denial of Service
Título:	MikroTik RouterOS <= 6.44.3 DoS Vulnerability
Resumen:	MikroTik RouterOS is prone to a denial of service (DoS); vulnerability in the SSH daemon.
Descripción:	Summary: MikroTik RouterOS is prone to a denial of service (DoS) vulnerability in the SSH daemon. Vulnerability Insight: The SSH daemon on MikroTik routers could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management. Affected Software/OS: MikroTik RouterOS version 6.44.3 and prior. Solution: The vendor suggests the following steps to harden and tune the SSH daemon by using a firewall filter and service port restrictions: - Reduce the number of allowed unauthenticated connections. - Set the maximum number of concurrent connections to the SSH daemon. CVSS Score: 7.8 CVSS Vector: AV:N/AC:L/Au:N/C:N/I:N/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2020-10364 https://packetstormsecurity.com/files/156790/Microtik-SSH-Daemon-6.44.3-Denial-Of-Service.html https://www.exploit-db.com/exploits/48228
Copyright	Copyright (C) 2020 Greenbone AG

Esta es sólo una de 145615 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.