CVE-2020-11881

7.5 highEPSS 3.8%

High (7.5) in mikrotik routeros. EPSS 3.8% chance of exploitation in the next 30 days.

An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-request packets, aka SUP-12964.

Severity

CVSS 3.1

7.5 high

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

EPSS: 3.8% chance of exploitation in the next 30 days; higher than 90% of CVEs (scores of 2026-10-31)
CWE: CWE-129
Published: 2020-09-14
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

mikrotik:routeros

References

https://github.com/botlabsDev/CVE-2020-11881
https://mikrotik.com
https://github.com/botlabsDev/CVE-2020-11881
https://mikrotik.com

Check your stack JSON