CVE-2024-54952: MikroTik RouterOS

High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days.

MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote, unauthenticated attackers can exploit this issue by sending specially crafted packets, triggering a null pointer dereference. This leads to a Remote Denial of Service (DoS), rendering the SMB service unavailable.

Affected products

• MikroTik RouterOS: version 6.40.5 only

Published 2025-05-29. Last modified 2026-06-17.