CVE-2020-20267: Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin...

Security readout for executives and security teams

CVE-2020-20267 is a denial-of-service issue in MikroTik RouterOS stable releases before 6.47. An attacker who already has authenticated remote access can trigger invalid memory access in the resolver process, potentially disrupting router service. The public data does not provide CVSS scoring or evidence of active exploitation. Exposure is most likely where MikroTik RouterOS stable installations remain below 6.47 and authenticated remote users can reach relevant management or service paths. The source bundle does not identify affected CPEs or specific deployment configurations. Treat this as a maintenance-priority network resilience issue. It is less urgent than unauthenticated remote code execution, but routers are operationally critical and denial of service can affect business connectivity. Mitigation focus: Inventory MikroTik RouterOS stable versions and prioritize systems below 6.47.; Upgrade affected RouterOS stable installations to 6.47 or later where supported.; Restrict authenticated RouterOS access to trusted administrators and networks..

Prepared

Jun 2, 2026, 19:53 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.