CVE-2021-36613: Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp process.

Security readout for executives and security teams

This flaw can let an authenticated remote attacker crash part of MikroTik RouterOS, causing a denial of service. The available record ties the issue to RouterOS versions before stable 6.48.2 and the ptp process. It is not listed in CISA KEV, and the bundle does not provide CVSS scoring. Exposure is most likely on MikroTik RouterOS devices running versions earlier than stable 6.48.2, especially where authenticated access is broadly available or credentials are compromised. The source bundle does not identify specific hardware models, configurations, or CPEs. Treat this as a moderate infrastructure availability issue. It is lower urgency than unauthenticated remote code execution, but critical routers below 6.48.2 should be upgraded or isolated promptly because outages can affect business operations. Mitigation focus: Upgrade affected RouterOS devices to stable 6.48.2 or later.; Check MikroTik guidance for current supported release recommendations.; Restrict administrative and authenticated access to trusted networks and users..

Prepared

Jun 2, 2026, 09:45 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.