To upgrade, click "Check for updates" at /system package in your RouterOS configuration interface, or head to our download page: http://www.mikrotik.com/download

If you experience version related issues, then please send supout file from your router to support@mikrotik.com. File must be generated while router is not working as suspected or after crash.

What's new in 6.40.5 (2017-Oct-31 13:05):

*) certificate - fixed import of certificates with empty SKID;
*) crs3xx - fixed 100% CPU usage after interface related changes;
*) firewall - do not NAT address to 0.0.0.0 after reboot if to-address is used but not specified;
*) ike1 - fixed crash after downgrade if DH groups 19,20,21 were used for phase1;
*) ike1 - fixed RSA authentication for Windows clients behind NAT;
*) ipsec - fixed lost value for "remote-certificate" parameter after disable/enable;
*) ipv6 - fixed IPv6 addresses constructed from prefix and static address entry;
*) log - properly recognize MikroTik specific RADIUS attributes;
*) lte - do not reset modem when it is not possible to access SMS storage;
*) lte - fixed modem initialization after reboot;
*) lte - fixed PIN option after setting up the band;
*) sms - include time stamps in SMS delivery reports;
*) sms - properly initialize SMS storage;
*) snmp - fixed "/system license" parameters for CHR;
*) winbox - allow shorten bytes to k,M,G in Hotspot user limits;
*) wireless - fixed rate selection process when "rate-set=configured" and NV2 protocol is used;

tool sms inbox message error
all message recib error
CCR1009-8G-1S-1S+
May/11/2001 07:15:07 GMT +11 a ekKECAdKGSESIC$o @@@@@@
SL@@@@@@d$@@@@@@@Xe@@@@@@@@*CUw@@@@@Ru=o$@@@@oae@@@@@@L;D@@@@@@0:haA
@@@@(@@@@@@

The rb2011uias2hnd can not boot after upgrade from 6.40.4 to 6.40.5 !!!

Sent from my C6833 using Tapatalk

just updated from 6.40.4 to 6.40.5 and i hear a loop reboot with a periodic beep sound!
HELP! What should i do to recover my router?!

Please connect serial cable to your router, open serial console and power on the router. Send whole serial output to support@mikrotik.com. Most likely problem is not related to specific RouterOS version and is caused by some kind of issue during upgrade process.

Also you can try to power off router, press and hold reset button. power router on and release the button. If router now boots up, then run command "/system routerboard upgrade" and then router should boot up normally after upcoming reboots.

"Also you can try to power off router, press and hold reset button. power router on and release the button."
tried, no luck

I do not have any serial cable. What should i do? (hAP AC was bought a week ago)
Tried patch cord + netinstall... The device reboots and invisible in Netinstall app

*) wireless - fixed rate selection process when "rate-set=configured" and NV2 protocol is used;

When (version) did this go wrong and what was exactly the issue?

Whoa! I think I will pass on upgrading to this version...
I haven't experienced firmware\BIOS update failure in ages. How this version passed QA tests?

Installed RouterOS version does not in any way affect Netinstall process. Ether boot happens before you have reached RouterOS. If you can not Netinstall device then problem is either with Netinstall (recommended to test with another router), RouterBOOT or hardware.

Wireless fix is made for configurations where nv2 and configured rates are used. If you experienced system lock-up or reboots, then this fix will most likely will solve the problem.

it happened right after upgrade to 6.40.5
no other changes were done. What could have happened?!

cAP Lite died after upgrade
I have Tried Netinstall but router does not shown in List also I have pushed reset-button for more than 300sec
CAP-LED and WLAN-LED are just Blinking

There is no problem with Netinstall (tested)

Upgraded various Routerboards (RB433AH, SEXTANT-G, cAP-Lite, mAP-Lite, hAP-Lite, SXT, Groove, RB3011, RB2011, RB1200, RB850Gx2, x86).

No problems so far

Updated through Winbox, pressed "Download and install". Previous version was 6.40.4. Connection was over cable. Maybe it depends on this?

What was already done:
1) Tried reset to default config - NO RESULT
2) Tried NetInstall 6.40.5/6.40.4/6.38 - NO RESULT (device is not visible)
3) Tried changing from 100Mbps to 1Gbps speed (thought it may be the reason. Based on RouterBOOT changelog: https://wiki.mikrotik.com/wiki/RouterBOOT_changelog) - NO RESULT (device is not visible)
4) Tried holding reset for more then 300 sec (based on this manual: https://wiki.mikrotik.com/wiki/Manual:R ... bootloader) - NO RESULT. Router reboots even before 300 sec are passed.

Just found those devices in my collection. Would it be enough to get any useful information about the reasons of such disaster? I am interested to solve this problem as fast as i can (if i can ). - NO RESULT (device is not visible)


Is there anybody who will guide me through the process?

No problems on 3x cap 2n, 2x 951g-2hnd, 1x map lite and 1x ccr 1009. All from 6.40.4 to 6.40.5, with 3.41 RouterBOOT.

Hello, c400!

Is there anybody who will guide me through the process?

May you try to follow steps from this video https://www.youtube.com/watch?v=GIijZ6_i55g in order to Netinstall your device?


Thank you!

Done Netinstall based on your video manual. No luck. Device is not shown in the app.
Brand new hAP AC (Bought 28.10.17) became a brick. I am sure it is something with firmware ore bad circumstances

If you are not able to Netinstall the device, then maybe you have protected bootloader enabled?
https://wiki.mikrotik.com/wiki/Manual:R ... bootloader

Hi,

I've upgraded RouterOS successfully on hAP lite, hEX and hAP ac from 6.40.4 to 6.40.5.
All devices had RouterBOARD firmware 3.41 before the upgrade.

So far so good...

Updated through Winbox, pressed "Download and install". Previous version was 6.40.4. Connection was over cable. Maybe it depends on this?

What was already done:
1) Tried reset to default config - NO RESULT
2) Tried NetInstall 6.40.5/6.40.4/6.38 - NO RESULT (device is not visible)
3) Tried changing from 100Mbps to 1Gbps speed (thought it may be the reason. Based on RouterBOOT changelog: https://wiki.mikrotik.com/wiki/RouterBOOT_changelog) - NO RESULT (device is not visible)
4) Tried holding reset for more then 300 sec (based on this manual: https://wiki.mikrotik.com/wiki/Manual:R ... bootloader) - NO RESULT. Router reboots even before 300 sec are passed.

Just found those devices in my collection. Would it be enough to get any useful information about the reasons of such disaster? I am interested to solve this problem as fast as i can (if i can ). - NO RESULT (device is not visible)


Is there anybody who will guide me through the process?

Me too
same problem in cAP lite

If you are not able to Netinstall the device, then maybe you have protected bootloader enabled?
https://wiki.mikrotik.com/wiki/Manual:R ... bootloader

If it is disabled by default, then i have not enabled it.
Any other suggestions? I do need help!

L2TP/Ipsec died after ugrading from 6.40.4
Now I have a bunch of "possible wrong password" errors.

WOW!!! i managed to see my device in NetInstall, but installing the package seems to be impossible due to looping restarts

UPD: Victory!

Here is the way i managed to get into Netinstall mode!!! It is not in the manual!

Tested on hAP AC

First way (do not remeber wich of them did really worked for me) But simply press and wait DID NOT WORKED in any combinations
1) Plug out power
2) Press RESET and hold, then plug in POWER
3) Continue holding
4) Watch SFP led blinking
5) Release RESET immediately
6) immediately start pressing RESET button fast and often

Second way:
1) Plug out power
2) Press RESET and hold, then plug in POWER
3) Continue holding
4) Watch SFP led blinking
5) Watch SFP led to start shine/not blinking
6) Release RESET immediately
7) immediately start pressing RESET button fast and often

Only after that i was able to write firmware. (Used NetInstall 6.40.5 and firmware 6.40.5)

Found possible problem point. I have two almost similar ipsec peers:
One was created by hand while configuring L2TP (8), another is dynamic one, created by configuring site to site vpn tunnel (9). It seems, that now L2TP tunnels (8) are using secret from site to site (9) to connect.

Is there any way to fix the problem, because 6.40.4→6.40.5 upgrade caused the problem, but downgrading back didn't solve it at all.

found: typo in ipsec secret. but it's kinda strange, because everything worked with this typo for about more than a year, and crashed just after this update.

Wireless fix is made for configurations where nv2 and configured rates are used. If you experienced system lock-up or reboots, then this fix will most likely will solve the problem.

Well, 80% of my network runs 6.40.4 and 95% of that has fixed configured rates across a whole range of different devices but so far never got the attention to strange system lock-up or reboots..
I am referring some 800 devices here....

So I don't know...

Upgraded couple of RB951G + 2 x RB1100AHx4 Dude .... seem to be working since night.

Found possible problem point. I have two almost similar ipsec peers:

It is not a valid configuration. You cannot predict which peer will be used. Probably in older version static peer was added later so it was not used. After reboot/upgrade static peer became more preferred.

http://up.vbiran.ir/uploads/43163151014 ... 20Lite.zip
restart loop

http://up.vbiran.ir/uploads/43163151014 ... 20Lite.zip
restart loop

try my way of getting Netinstall work.

3 times in the past 18 months I've bricked one of my hAP AC units during the upgrade process. Now, it's happened with the 6.40.3 to 6.40.5 uograde.

Downloaded latest stable config. Copied .NPK file to the 'file' area using Winbox. Rebooted the unit, and it started in looping reboots. Invisible in WinBox. Each time I was unable to recover using NetInstall. Invisible in NetInstall. This has NEVER happened when I upgraded the single band 952 units. Each time I was able to RMA the hAP AC for a new one. Since this happened only with the hAP AC units, I wonder if something is up with this hardware? Any suggestions?

I see lots of forum posts about bricked routers amd looping restarts after upgrading to stable firmware.

Some help from Mikrotik would be welcome.

Regards,
Dave

[@kavir@Access-CoreRouter-KavirNet] > dude
[@kavir@Access-CoreRouter-KavirNet] /dude> pri
enabled: yes
data-directory: dude
status: db failure: constraint failed: stopped
[@kavir@Access-CoreRouter-KavirNet] /dude>

hi
our core router ccr1009 has stop working and after i split power cable its come back but the dude has stop working and in new terminal i have this error
what should i do ?

Don't you use internal flash as dude storage, do you?

I am having the exact same problem - upgraded a client's hAP ac from 6.40.4 to 6.40.5 and it gets stuck in a boot loop.

I am unable to recover it using any of the techniques listed in this thread - I cannot get it into Netinstall mode (I have successfully done this several times before with other Mikrotik hardware) no matter what I do. I also tried the 300-second reset button hold technique - it has no effect and the hAP ac continues to boot loop as if I hadn't pressed the button.

I realize I should have checked to see if anyone was having difficulties with v6.40.5 before I started the package upgrade process, but I've never had this problem with any Mikrotik gear before.

Any ideas? I consider myself a fairly savvy user and support a number of offices with Mikrotik gear.

thanks!

Norm

I am having the exact same problem - upgraded a client's hAP ac from 6.40.4 to 6.40.5 and it gets stuck in a boot loop.

I am unable to recover it using any of the techniques listed in this thread - I cannot get it into Netinstall mode (I have successfully done this several times before with other Mikrotik hardware) no matter what I do. I also tried the 300-second reset button hold technique - it has no effect and the hAP ac continues to boot loop as if I hadn't pressed the button.

I realize I should have checked to see if anyone was having difficulties with v6.40.5 before I started the package upgrade process, but I've never had this problem with any Mikrotik gear before.

Any ideas? I consider myself a fairly savvy user and support a number of offices with Mikrotik gear.

thanks!

Norm

do not capitulate!
i was trying for 2 hours to see my hap AC in Netinstall tool. And suddenly succeeded!

Just out of curios: as i tried to upgrade MT under 6.39.1 with "/system package update install" it upgraded to 6.40.4. After the upgrade and reboot I issued the same command and it offered me 6.40.5.

So the whole way was: 6.39.1 -> 6.40.4, and the 6.40.4 -> 6.40.5. Why it won't tried to do the whole process in one step, like 6.39.1 -> 6.40.5?

Strange for me!

Maybe wise to put an hold or warning for updating the Hap AC to 6.40.5 because of problems written about earlier.

Just out of curios: as i tried to upgrade MT under 6.39.1 with "/system package update install" it upgraded to 6.40.4. After the upgrade and reboot I issued the same command and it offered me 6.40.5.

So the whole way was: 6.39.1 -> 6.40.4, and the 6.40.4 -> 6.40.5. Why it won't tried to do the whole process in one step, like 6.39.1 -> 6.40.5?

Strange for me!

Maybe the new naming for the firmware blocks, a direct update to the last stable.

Maybe the new naming for the firmware blocks, a direct update to the last stable.

Noop, the f/w still named as 3.41, not this weird new way ) And this was current branch all the way as I applied the updates.

This was my handy "play with" router, no problem, but should it be remote one this can be a problem as each extra reboot is an extra risk.

I've just upgraded 433gl, 850, hap ac, 1009 everything is fine. Process went smoothly.

Hi. I have several CHR and in some I was able to update without problems, but in others I downloaded the package, it restarted but when starting again it continues with version 6.40.4. Try downloading the package from the CHR and downloading it from the page and copying it to the CHR. Same mistake.

but in others I downloaded the package, it restarted but when starting again it continues with version 6.40.4. Try downloading the package from the CHR and downloading it from the page and copying it to the CHR. Same mistake.

Check the Log. Seems like you have expired license.

After testing with RB750 and RB3011, the upgrades are ok, but going from 6.39 to 6.40.5 reveals a problem on MLPPP. I'm using 2 DSL modems. If one of the modems loses its physical layer, such as loss of power or loss of ADSL sync, the MLPPPoE bundle gets confused and does not bring the link down to 1 line. If the second link is restored the bundle still stays degraded and doesn't seem to recognize that the second link is back. Its just packet loss. Resetting both links at the same time seems to be ok as MLPPPoE will properly recover.

Generally I got 4 units: RB3011, RB2011, RB750Gr3 and CRS326 only RB3011 and CRS326 upgraded with no problem. RB2011 in loop (I already did Netinstall and unit works fine (downgraded to 6.38.7 just looking for stable version and on forum I found out that people recommend that version), RB3011 was upgraded with no problem but still somehow it was unstable so downgraded to 6.38.7. CRS326 running with no problem till now but not much happening there, its working as switch with no features. RB750Gr3 is down, well it boot to OS but not showing any OS version so tomorrow I will try first copy file with lower version and if this will not help Netinstall also....so to much trust on MikroTik from my side, next time I will wait at least week to see if anyone will have issues during upgrade.

Some of you can confirm that in NetWatch Interval time does not work properly.
I`m using NetWatch to alarm me when of my server down and i`m using this code. You can see into the log that intervel time did`t match from the time where i set in NetWatch
Any idea why that happend

tool sms inbox message error
all message recib error
CCR1009-8G-1S-1S+
May/11/2001 07:15:07 GMT +11 a ekKECAdKGSESIC$o @@@@@@
SL@@@@@@d$@@@@@@@Xe@@@@@@@@*CUw@@@@@Ru=o$@@@@oae@@@@@@L;D@@@@@@0:haA
@@@@(@@@@@@

Same here, SMS text garbled on RB411UAHR (factory reset done after upgrade 6.40.5), and also on router upgraded from 6.40.4 to 6.40.5 , Sierra Wireless MC8792V

"Fixed in next version"? Or should i upload supout?


UPDATE: never mind, works again in latest RC

Hello, just FYI, I have upgraded all of my RBs successfully on 1st try

List of RBs:
- RB433AH - previous version was 6.39.1 with factory default firmware
- RB951G-2HnD - previous version was 6.40.4 with 3.41 firmware
- RB2011UiAS-2HnD - previous version was 6.40.4 with 3.41 firmware

Also my report:
CCR1009-1C-7G-1S-1S+ including Dude on SD, 922UAGS-5HPacD (NetMetal5) + R11e-5Hnd, LHG5, 960PGS (hEX POE), OmniTIK UPA-5HnD, 921GS-5HPacD r2 (mANTBox), 951G-2HnD, 450G, 750GL and 911G-5HPnD (QRT5)
all upgraded from 6.40.4 without incidents.

Today I uploaded on all my units via ftp or Winbox and all of them upgraded and working with no problems anyway I love those units that there are no problems with recovering them
Units that I upgraded you can find in my sign

Can I report regression present now, but also traced back to earlier version?

Problem:
When using wireless interface in mode=station-pseudobridge-clone, bridged to ether1, infinite loop of "lost connection, found address to clone" is observed since v6.37 to v6.40.5. Naturally, the single device connected to ether1 does not have network connectivity, regardless of whether it tries to obtain address via DHCP, nor is it pingable with a static IP.

Before v6.37, pseudobridge-clone mode works as expected using exactly the same config.

Unfortunately, I cannot use station-wds or station-bridge mode as the other end is not a Mikrotik device, so I need pseudobridge-clone to work.

Hardware tested with:
hAP lite

Versions tested:
6.40.5 (current) - broken
6.40.4 (current) - broken
6.39.3 (bugfix) -broken
6.38.5 (current) - broken
6.37.3 (current) - broken
6.37.0 (current) - broken
6.36.4 (bugfix) - working
6.36.3 (current) - working
6.33.5 (current) - working

I have supout.rif file for 6.36.4, 6.37 and 6.40.5 if support would like to inspect them.

The device is fully Netinstall for each version, using this configure file: Only wpa2-pre-shared-key for security-profiles is removed.

deleted

deleted.

I have problem with two rb750GL both of them after upgrade to 6.40.5 are working fine for some time and then just freeze. I see them from other MT in the same bridge but cant log in , then go reboot and work fine for another 12 to 24 hours. Routerboard bios flashed to 3.41 , now I added WD to nearest device but i think that there is something wrong in this situation. Before there was no problem with any of them. Any ideas?

config is really simple one of them is just bridge other one has bridge and 3 vlan's thats all.

Hello,
I have hAP ac router, after update from 6.38.x to 6.40.5 the signal of 5GHz not stable, I can connect only with 2GHz channel. When I can see the 5GHz signal it no possible connect to Wi-Fi. I didnt do any changes in setups after update, update was automaticaly from "Quick Set" page.
May be I have to check some setups to restore functionality?

I have upgraded to 6.40.5 on (2) DynaDisk 5 and RB2011 also upgraded the firmware. After the upgrade all the RB's where cutting out. Using btest to any upgraded unit shows good speed, then no speed for several seconds intermittently. After downgrading all the speed test was constantly good. It looks like the firmware upgrade was the issue.

Hi,
I just upgrade my client router hap-lite2 and suddenly the connection lost. oh my god, their office is around 58.4KM away.
i wasn't give up, tried to mac telnet and it do the trick, i was able to connect to the terminal.

then i could reach the terminal, ports was running (flag R), but the ip was not working. after some check, port name and physical port wasn't match with the previous condition. why this could be happened?
upgraded from 6.29 to 6.40.5

My similar experience many years ago teached me not to rename the ports. I use comments to mark the ports by their meaning instead and keep the original port names.

My similar experience many years ago teached me not to rename the ports. I use comments to mark the ports by their meaning instead and keep the original port names.

Hi jarda,
Yes, agree. the interface name was remains default. ether1, ether2, ether3, ether4 and only commented on ether2 and ether4.

need abit of CRS326 help.
...

Could you please use the proper forum sections and not pollute a firmware announcement topic?

Ahhhh the first victim of the new firmware version notation keeping in touch with the RouterOS version notation.

"Also you can try to power off router, press and hold reset button. power router on and release the button."
tried, no luck

I do not have any serial cable. What should i do? (hAP AC was bought a week ago)
Tried patch cord + netinstall... The device reboots and invisible in Netinstall app

try putting a switch between your laptop nic and the mikrotik device, sometimes netinstall does not work directly to the nic, happened to me last week

connect the RouterBOARD device to power with the RESET button pushed, until you see the device in the Netinstall program interface. Then release the RESET button (around 15 seconds since power on).

Updated rb952ui-5ac2nd and https on wifi connection stopped working, even winbox is kicked-out after 2 seconds. But only on wifi (using capsman).
When connected by ether ports, it works just fine, both https and winbox, from wan side is everything accesible also.

Hello, I have the typical set of rules of drop ssh stages that is shown in the Mikrotik wiki, but I notice that in this version 6.40.5 does not detect when the connection is new, therefore it does not work. I had to make the new connection markup from the "mangle" table because in filter I stop working. Is it just my problem? Is it some new feature that I do not know?

Thank you.

Looks like there is no life in MT kingdom after 6.40.5 and 6.41rc52 - see no changes on download page for days. Hope to see another 6.40.x current before we see "6.41-Revolution-is-here" release!

increase in cpu usage to 16% from 1% on RB3011UiAS

increase in cpu usage to 16% from 1% on RB3011UiAS

I've also noticed a slight cpu (not as much as yours) increase on CCR1036 after upgrading to 6.40.5 from 6.38.x.

CRS317-1G-16S+ switch menu shows no ports is this normal?

6.35.4-------->6.40.5 with ease.

Hi all

I have the exact same problem after upgrading my RB951G-HnD to 6.40.5. It beeps every 6 seconds. It doesn't get picked up in Netinstall. Also, Windows cannot keep a LAN connection to the RB, it keeps on Identifying and then cable unplugged (loop). This occurs on all ports. Is there any solution to get my RB working again. I have done a reset as well with no success.

Any advise will be appreciated.

Regards
Marnus

On RB433AH updated from old 6.39.2. It works good but something may be wrong with DHCP6Client.
6.39.2 got address and prefix from my ISP in few seconds.
6.40.5 got nothing and searching forever.
I downgrade to 6.39.3 and problem still the same.
So finaly downgrade back to 6.39.2 and it works fine.

So IPV6 implementation of my ISP may be buggy. Or something wrong with new 6.39.3 to 6.40.5 release.
Can i solve this when i reset RB to default and setup it again from backup ?

So I upgrade it to 6.40.5 and reset it to default. Then I setup it from backup and it works fine. So best way is BACKUP -> UPGRADE -> RESET TO DEFAULT -> SETUP IT FROM BACKUP.

I had problems with several Samsung Galaxy S7 Edge devices running Android 7.0 with wAP AC and central CAPSMAN controller running 6.40.5. The smartphones connected, but they had no internet. I updated the wAP AC from 6.40.5 to 6.41rc56. The CAPSMAN controller is still runing at 6.40.5
Now the smartphones can connect and have internet access. So whatever change the latest RC received it would be great if that one could be integrated into the next 6.40.x release.

Last current has a problem about MTU.
Since I run MPLS I had a problem with a client that has VPLS flapping, after a lot of time throubleshooting I run a ping with don't fragment bit and packet size 1526 and despite the MTU and L2MTU of interfaces were 1600 and MPLS MTU 1530 it fragmented, so I raised to 1700 the L2MTU and it worked. Before the update I haven't had this problem on any network with same configuration.

after upgraded to 6.40.5 make increase cpu activity sometime always hit 100% usage
rb750r2
rb750gr2
rb450g
rb850gx2

edit: replace rb750r2 & rb750gr2 to rb750gr3, rb450g to rb850gx2, rb850gx2 to ccr1009-7g with same config currently look fine
i think the old hardware doesnt powerfull enough passing high bandwidth

Updated 2011UiAS-2HnD from 6.40.4 (firmware 3.41) to 6.40.5 - so far no problems.

Upgraded my CHR(Dude Server) to 6.40.5 and now the Dude server lost all SVG icons for devices, the background grid map doesn't show and adding it back I get stuck in 'loading' but the images don't show.

Device discovery completes but the topology does not resolve. 1 hour later, still stuck at 'finishing 100% Complete'.

PPP profile 'on-down' commands are run when connection attempts unsuccessful.

We run a simple script to clear connection tracking entries, so that NAT updates correctly when outbound connectivity for VoIP changes. Primary connection is PPPoE and failover is LTE.

Problem is that PPPoE client, when connection attempt times out, always runs 'on-down' commands, instead of only running them if the state changes.

The script: PPP profile: '/sys script print brief' will show run count incrementing when connect attempt to establish but times out...

------------------
[admin@MikroTik] > /certificate crl print detail
Flags: E - expired, D - dynamic
0 D cert=cert_export_KBV-CHR-CA.crt_0 url="http://192.168.80.251/crl/4.crl" num=0 revoked=0
signature="********"
next-update=dec/09/2018 08:05:30 last-update=dec/09/2017 08:50:44
------------------
Will this happen next year?

version: 6.40.5
architecture-name: x86_64
board-name: CHR

sir, i have problem with user id and password , the login page showing me radius server is not repond

sir, i hae not understand your what is the solution against the complaint login page showing Radius server is not responding against with user manager user id and password which showing already on the screen shot of the login page.

Dear Mikrotik Team

A DoS vulnerability has been released to RouterOS 6.40.5.

https://cve.mitre.org/cgi-bin/cvename.c ... 2017-17538
https://www.exploit-db.com/exploits/43317/

What kind of schedule is correspondence such as update?

Best regards.

Dear Mikrotik Team

A DoS vulnerability has been released to RouterOS 6.40.5.

https://cve.mitre.org/cgi-bin/cvename.c ... 2017-17538
https://www.exploit-db.com/exploits/43317/

What kind of schedule is correspondence such as update?

Best regards.

That is not a vulnerability. Somebody made a ping script that floods the device, and result is that CPU usage rises.
Any task will affect CPU usage. This is normal.
The submitter is some person looking for internet fame.
We will see who we need to contact to de-list fake CVE submissions.

Thanks normis.

Was there any such circumstance in this information ...

For the time being, I will try to keep this situation still.

Best regards.

Hi.

I have a a few MK RB1100 on producction running the hotspot service and after update from 6.36 to 6.40.5 experience issues.

After x time 10/20/30 min, i suppose it depends on the amount of traffic, the portal starts to fail, could be:
Portal doesn´t appear or Login button does nothing, but firewall hotspot rules continues matching packets.
If i change any configuration on the hotspot server , everything start to work fine. Like if the service restarts resolve the issue.
My implementation use external radius server.
The ammount of simultaneous users is between 140 and 800

I have to say model CCR1016-12G woks fine with the same release.

Thanks

Little "/export" issue:
in "ip dhcp-server" section, any setting to "bootp-support" (e.g. set bootp-support=none lan_dhcp) will not be exported

Version 6.41 has been released:
viewtopic.php?f=21&t=128915