MEDIUM

CVE-2020-20267

CVSS v3

6.5

MEDIUM

EPSS Score

1.0%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/resolver process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access.

Technical details

Published
5/11/2021

Frequently asked questions

What is CVE-2020-20267?

Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/resolver process. An authenticated remote attacker can cause a Denial of Service due to invalid memory access.

Is CVE-2020-20267 actively exploited?

Active exploitation of CVE-2020-20267 has not been confirmed. The EPSS score is 1.0%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2020-20267?

CVE-2020-20267 has a CVSS v3 base score of 6.5 (MEDIUM severity).

Is CVE-2020-20267 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.