MEDIUM

CVE-2020-20265

CVSS v3

6.5

MEDIUM

EPSS Score

0.4%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An authenticated remote attacker can cause a Denial of Service due via a crafted packet.

Technical details

Published
5/11/2021

Frequently asked questions

What is CVE-2020-20265?

Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An authenticated remote attacker can cause a Denial of Service due via a crafted packet.

Is CVE-2020-20265 actively exploited?

Active exploitation of CVE-2020-20265 has not been confirmed. The EPSS score is 0.4%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-20265?

CVE-2020-20265 has a CVSS v3 base score of 6.5 (MEDIUM severity).

Is CVE-2020-20265 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.