Vigie VulnDBEuropean-hosted Vulnerability DB

CVE-2026-7668

MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds

At a glance

Severity
MEDIUM 6.9
EPSS
EPSS 0.30 % · percentile 23 (2026-10-27)
State
PUBLISHED
Published
Updated
Assigner
VulDB
NVD status
Deferred

Description

A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulation of the argument transactionID/messageType leads to out-of-bounds read. The attack may be initiated remotely. The exploit is publicly available and might be used. You should upgrade the affected component. The vendor recommends to "use the latest v6.x or 7.x MikroTik RouterOS version, the reported issue should be fixed there."

Scores

VersionScoreVectorScored by
CVSS 4.0MEDIUM 6.9CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:PVulDB
CVSS 3.1HIGH 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:CVulDB
CVSS 3.0HIGH 7.3CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L/E:P/RL:O/RC:CVulDB
CVSS 2.0HIGH 7.5AV:N/AC:L/Au:N/C:P/I:P/A:P/E:POC/RL:OF/RC:CVulDB
CVSS 4.0MEDIUM 5.5CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:XNVD · cna@vuldb.com (Secondary)
CVSS 3.1HIGH 7.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:LNVD · cna@vuldb.com (Secondary)
CVSS 2.0HIGH 7.5AV:N/AC:L/Au:N/C:P/I:P/A:PNVD · cna@vuldb.com (Secondary)

Weaknesses (CWE)

European references

Affected products

ProductVersions
MikroTik · RouterOSaffected 6.49.8

References

Sources

SourceLicence
CVE List (CVEProject cvelistV5)CVE Program Terms of Use
EPSS (FIRST.org)FIRST — attribution requested
ENISA EUVDENISA — reproduction authorised, source acknowledged
NVD (NIST) via fkie-cad/nvd-json-data-feedsPublic domain — this product uses data from the NVD API but is not endorsed or certified by the NVD