CVE-2019-13955 : What You Need to Know

Mikrotik RouterOS version prior to 6.44.5 has a vulnerability related to stack exhaustion, allowing a remote attacker to crash the HTTP server.

Understanding CVE-2019-13955

This CVE involves a specific vulnerability in Mikrotik RouterOS that can be exploited by authenticated remote attackers.

What is CVE-2019-13955?

The Mikrotik RouterOS version before 6.44.5, part of the long-term release tree, is susceptible to stack exhaustion. An attacker with authentication can crash the HTTP server by sending a specially crafted HTTP request that triggers recursive parsing of JSON. Notably, this vulnerability does not permit the injection of malicious code.

The Impact of CVE-2019-13955

This vulnerability can lead to a denial of service (DoS) condition by causing the HTTP server to crash, disrupting network services and potentially causing downtime.

Technical Details of CVE-2019-13955

This section delves into the technical aspects of the CVE.

Vulnerability Description

The vulnerability in Mikrotik RouterOS allows an authenticated remote attacker to crash the HTTP server through recursive parsing of JSON, leading to stack exhaustion.

Affected Systems and Versions

Affected System: Mikrotik RouterOS
Affected Versions: Versions prior to 6.44.5

Exploitation Mechanism

The vulnerability is exploited by sending a specifically crafted HTTP request that triggers recursive parsing of JSON, causing the HTTP server to crash.

Mitigation and Prevention

Protecting systems from CVE-2019-13955 requires immediate actions and long-term security practices.

Immediate Steps to Take

Update Mikrotik RouterOS to version 6.44.5 or later to mitigate the vulnerability.
Monitor network traffic for any suspicious activity that could indicate an ongoing attack.

Long-Term Security Practices

Implement strong authentication mechanisms to prevent unauthorized access to the network.
Regularly update and patch all software and firmware to address known vulnerabilities.

Patching and Updates

Apply patches and updates provided by Mikrotik promptly to ensure the security of the RouterOS.