CVE-2017-6444 - CVE House
Back to Database
Status published High CVE-2017-6444

The MikroTik Router hAP Lite 6.25 has no protection mechanism...

Vulnerability Description

The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows remote attackers to cause a denial of service (CPU consumption) by sending many ACK packets. After the attacker stops the exploit, the CPU usage is 100% and the router requires a reboot for normal operation.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-6444

Credits & Attribution

No credits recorded in the NVD database.

References

More from mikrotik

View All →
CVE-2022-45313
Mikrotik RouterOs before stable v7.5 was discovered to contain an...
Unknown 0
CVE-2022-36522
Mikrotik RouterOs through stable v6.48.3 was discovered to contain an...
Medium 6.5
CVE-2022-34960
The container package in MikroTik RouterOS 7.4beta4 allows an attacker...
Critical 9.8
CVE-2021-41987
In the SCEP Server of RouterOS in certain Mikrotik products,...
High 8.1
CVE-2021-3014
In MikroTik RouterOS through 2021-01-04, the hotspot login page is...
Medium 6.1

Affected Vendor

Affected Software

routeros
Vulnerable Versions:
6.25

Timeline

Official Publish: March 12th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.