A remote attacker can send specially crafted SMB packets to the device, causing the Mikrotik RouterOS SMB service to crash. The resulting crash renders the router unavailable, disrupting network connectivity and any services depending on the device.

Devices running Mikrotik RouterOS x86 versions 6.40.5 through 6.49.10 are vulnerable. The flaw was addressed in the 7.x release line.

The vulnerability is exposed over the network via TCP port 445, so remote attackers can trigger it from outside the local network. No EPSS score or KEV entry is available, which suggests limited public exploitation data, but the fixed status in the newer release shows that the vendor considered the issue significant. The exploit requires no special privileges; an attacker simply transmits malformed SMB traffic to force a crash.