CVE-2020-20253: Mikrotik RouterOs before 6.47 (stable tree) suffers from a divison by zero vulnerability in the /nova/bin/l...

Security readout for executives and security teams

This CVE describes a denial-of-service flaw in MikroTik RouterOS before 6.47 stable. An authenticated remote attacker could crash or disrupt the lcdstat process through a divide-by-zero condition. The business risk is availability loss on affected routers, not confirmed data theft or remote unauthenticated takeover. Exposure is likely limited to MikroTik RouterOS stable-tree deployments older than 6.47 where remote authenticated access is possible. The bundle’s affected product fields are n/a, so asset owners should verify versions directly against MikroTik records. Treat this as a moderate availability risk for older MikroTik routers. It should be handled through normal vulnerability management unless the device supports critical connectivity, has broad admin exposure, or cannot be upgraded promptly. Mitigation focus: Inventory MikroTik RouterOS devices and record exact stable-tree versions.; Prioritize devices older than RouterOS 6.47 for vendor-guided upgrade review.; Restrict administrative access to trusted networks and accounts..

Prepared

Jun 2, 2026, 19:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.