The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to…
Priority LOW 38CWE-770Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Denial of service
- Confidentiality · integrity · availability
- None · None · High
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · NVD. Fix status from CNA. Impact type from CWE-770.
Summary
The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write system calls, because of uncontrolled resource management.
Why it matters now
EPSS 0.0266 85th percentileScored 2026-11-07
Public exploit Yes 2 exploit referencesTagged by NVD
Fix No fix listed No fixed version in the sources yet
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | — | all versions | — | No fix listed | CNA |
- — Vendor— Affected all versions Fixed in — No fix listed CNA
CPE configurations NVD · 27
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:* | up to 6.44.3 | Vulnerable | MikroTik |
| cpe:2.3:h:mikrotik:ccr1009-7g-1c-1s\+:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:ccr1009-7g-1c-1s\+pc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:ccr1009-7g-1c-pc:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:ccr1016-12g:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:ccr1016-12s-1s\+:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:ccr1036-12g-4s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:ccr1036-12g-4s-em:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:ccr1036-8g-2s\+:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:ccr1036-8g-2s\+em:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
- cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:* Versions up to 6.44.3 Vulnerable ·MikroTik
- cpe:2.3:h:mikrotik:ccr1009-7g-1c-1s\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:ccr1009-7g-1c-1s\+pc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:ccr1009-7g-1c-pc:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:ccr1016-12g:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:ccr1016-12s-1s\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:ccr1036-12g-4s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:ccr1036-12g-4s-em:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:ccr1036-8g-2s\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:ccr1036-8g-2s\+em:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
Show 17 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:h:mikrotik:ccr1072-1g-8s\+:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:hex:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:hex_lite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:hex_poe:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:hex_poe_lite:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:hex_s:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:powerbox:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:powerbox_pro:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:rb1100ahx4:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:rb1100ahx4:-:*:dude:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:rb2011il-in:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:rb2011il-rm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:rb2011ils-in:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:rb2011uias-in:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:rb2011uias-rm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:rb3011uias-rm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
| cpe:2.3:h:mikrotik:rb4011igs\+rm:-:*:*:*:*:*:*:* | not specified by NVD | Running on | MikroTik |
- cpe:2.3:h:mikrotik:ccr1072-1g-8s\+:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:hex:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:hex_lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:hex_poe:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:hex_poe_lite:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:hex_s:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:powerbox:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:powerbox_pro:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:rb1100ahx4:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:rb1100ahx4:-:*:dude:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:rb2011il-in:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:rb2011il-rm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:rb2011ils-in:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:rb2011uias-in:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:rb2011uias-rm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:rb3011uias-rm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
- cpe:2.3:h:mikrotik:rb4011igs\+rm:-:*:*:*:*:*:*:* Versions not specified by NVD Running on ·MikroTik
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2020-10364
- 2026-10-03 Alias added: GHSA-wv35-897x-f828
References
More MikroTik Routeros vulnerabilities
- TI-2018-05369 A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS… KEVCVSS 3.1CRITICAL 9.8
- TI-2026-58872 SSH session privilege manipulation via a crafted username in Mikrotik RouterOS KEVCVSS 4.0CRITICAL 9.2
- TI-2018-10669 MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary… KEVCVSS 3.1CRITICAL 9.1
- TI-2026-47574 Kernel memory disclosure and denial of service in MikroTik RouterOS btest service KEVCVSS 4.0HIGH 8.8
- TI-2026-47576 SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS KEVCVSS 4.0MEDIUM 6.9
- TI-2022-22302 Out-of-bounds read in MicroTik RouterOS CVSS 3.1CRITICAL 9.8
Sources
- CVE-2020-10364 · CVE Program
- CVE-2020-10364 · NVD
- FIRST EPSS
- GHSA-wv35-897x-f828 · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences