CVE-2018-5951
CVE-2018-5951 is a high-severity vulnerability in Mikrotik Routeros with a CVSS 3.x base score of 7.5. It is not currently listed as actively exploited by CISA, and its EPSS exploit-prediction score is low.
Key facts
- Severity: High (CVSS 3.x base score 7.5)
- CVSS v2: 7.1
- EPSS exploit prediction: 4% (91st percentile)
- Actively exploited: Not listed in CISA KEV
- Affected product: Mikrotik Routeros
- Published:
- Last modified:
Description
An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack.
Frequently asked questions
- What is CVE-2018-5951?
- An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack.
- How severe is CVE-2018-5951?
- CVE-2018-5951 has a CVSS 3.x base score of 7.5, rated high severity. It is exploitable over network with low attack complexity, requires no privileges and no user interaction. Impact on confidentiality is none, integrity none, and availability high.
- Is CVE-2018-5951 being actively exploited?
- It is not currently listed in CISA's KEV catalog. Its EPSS exploit-prediction score is 4% (91st percentile), an estimate of the probability of exploitation in the next 30 days.
- What products are affected by CVE-2018-5951?
- CVE-2018-5951 affects Mikrotik Routeros. See the affected-products list for the exact vulnerable versions.
- How do I fix CVE-2018-5951?
- Review the linked vendor and NVD advisories for patched versions and mitigations, then upgrade or apply the recommended workaround. Given its high severity, prioritise patching exposed systems.
- When was CVE-2018-5951 published?
- CVE-2018-5951 was published on 2020-03-02 and last updated on 2026-06-17.
References
Affected products (1)
- cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*
More vulnerabilities in Mikrotik Routeros
- CVE-2026-86060 — Critical (CVSS 9.8): RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohibited…
- CVE-2017-20149 — Critical (CVSS 9.8): The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka…
- CVE-2022-34960 — Critical (CVSS 9.8): The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic…
- CVE-2018-7445 — Critical (CVSS 9.8): A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages.…
- CVE-2026-67278 — Critical (CVSS 9.1): MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures across RSA-based services, including TLS/X.509…
- CVE-2023-30799 — Critical (CVSS 9.1): MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A…
All CVEs affecting Mikrotik Routeros →
Threat intelligence
Threat-intel indicators referencing this CVE:
- 185.193.240.246 (ipv4-addr)
- 35.130.111.98 (ipv4-addr)
- 35.130.111.146 (ipv4-addr)
- 196.202.111.134 (ipv4-addr)
- 27.110.176.222 (ipv4-addr)
- 45.238.235.2 (ipv4-addr)
- 109.238.212.91 (ipv4-addr)
- 45.118.77.67 (ipv4-addr)