What’s Vulnerable › Vulnerabilities

CVE-2019-13074

• Severity: high (CVSS 7.5 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.0% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-07-03 · updated 2026-06-17
• Weakness: CWE-770

Description

A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all available memory, causing the device to reboot because of uncontrolled resource management.

Affected products

• MikroTik RouterOS: through 6.44.3

References

• https://forum.mikrotik.com/viewtopic.php?t=150045
• https://mikrotik.com/download/changelogs/stable-release-tree
• https://forum.mikrotik.com/viewtopic.php?t=150045
• https://mikrotik.com/download/changelogs/stable-release-tree

Get alerted when CVE-2019-13074 or the next vulnerability affects your stack