CVE-2020-10364

HIGH

7.5

CVSS Score

Published: March 23, 2020 at 03:56 PM UTC

Updated: June 17, 2026 at 02:47 AM UTC

26 products affected across 1 vendorRouterOSRb3011Uias-RmCcr1009-7G-1C-1S\

Using N/A by N/A?

Get instant alerts when new vulnerabilities affect N/A - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.5

Exploit prediction

EPSS 3%

Description

The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management.

Affected

Our own answer: ranges merged, affected separated from platform-only, with confidence and review flags.

RouterOS · Mikrotik

95%

v ≤ 6.44.3

mikrotik-ccr1009-7g-1c-1s (environment) · mikrotik-ccr1009-7g-1c-1s-pc (environment) · mikrotik-ccr1009-7g-1c-pc (environment) · mikrotik-ccr1016-12g (environment) · mikrotik-ccr1016-12s-1s (environment) · mikrotik-ccr1036-12g-4s (environment) · mikrotik-ccr1036-12g-4s-em (environment) · mikrotik-ccr1036-8g-2s (environment) · mikrotik-ccr1036-8g-2s-em (environment) · mikrotik-ccr1072-1g-8s (environment) · mikrotik-hex (environment) · mikrotik-hex-lite (environment) · mikrotik-hex-poe (environment) · mikrotik-hex-poe-lite (environment) · mikrotik-hex-s (environment) · mikrotik-powerbox (environment) · mikrotik-powerbox-pro (environment) · mikrotik-rb1100ahx4 (environment) · mikrotik-rb2011il-in (environment) · mikrotik-rb2011il-rm (environment) · mikrotik-rb2011ils-in (environment) · mikrotik-rb2011uias-in (environment) · mikrotik-rb2011uias-rm (environment) · mikrotik-rb3011uias-rm (environment) · mikrotik-rb4011igs-rm (environment)

Ccr1009-7G-1C-1S\· Mikrotikdevice

80%

All versions

Ccr1009-7G-1C-1S Pc · Mikrotikdevice

80%

All versions

Ccr1009-7G-1C-Pc · Mikrotikdevice

80%

All versions

Ccr1016-12G · Mikrotikdevice

80%

All versions