CVE-2020-20265: Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /ram/pckg...

Security readout for executives and security teams

This flaw can let an authenticated remote attacker crash a MikroTik RouterOS wireless process, causing denial of service. The public bundle identifies RouterOS stable releases before 6.47 as affected. There is no provided evidence of active exploitation or broader impact beyond service disruption. Exposure appears limited to MikroTik RouterOS stable-tree devices earlier than 6.47, especially where authenticated management or wireless-related access is reachable by untrusted users. The source bundle does not identify specific models, configurations, or CPEs. Treat this as a service-availability risk for MikroTik-managed environments, not as confirmed widespread exploitation. Prioritize internet-adjacent or operationally critical routers first, then complete standard firmware hygiene across remaining affected devices. Mitigation focus: Inventory MikroTik RouterOS devices and identify stable-tree versions earlier than 6.47.; Upgrade affected devices to a supported non-vulnerable release after confirming MikroTik guidance.; Restrict administrative and authenticated access paths to trusted management networks..

Prepared

Jun 2, 2026, 19:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.