CVEs-PoC/2021/CVE-2021-36614.md

CVE-2021-36614

Description

Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the tr069-client process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).

POC

Reference

• http://seclists.org/fulldisclosure/2022/Jun/2
• https://seclists.org/fulldisclosure/2021/Jul/0

Github

No PoCs found on GitHub currently.