← Database

CVE-2024-54952

HIGH CVSS: 7.5 Published: 2025-05-29 Modified: 2026-06-17

Description

MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote, unauthenticated attackers can exploit this issue by sending specially crafted packets, triggering a null pointer dereference. This leads to a Remote Denial of Service (DoS), rendering the SMB service unavailable.

Affected Platforms

Mikrotik Routeros

Weakness Type

CWE-476

References