MEDIUM

CVE-2020-20220

CVSS v3

6.5

MEDIUM

EPSS Score

1.0%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

Technical details

Published
5/18/2021

Frequently asked questions

What is CVE-2020-20220?

Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

Is CVE-2020-20220 actively exploited?

Active exploitation of CVE-2020-20220 has not been confirmed. The EPSS score is 1.0%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-20220?

CVE-2020-20220 has a CVSS v3 base score of 6.5 (MEDIUM severity).

Is CVE-2020-20220 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.