Music began for Segun Johnson at a tender age as a local drummer in the church. His musical journey evolved as he transitioned into singing at 24 and launched his professional career as a crossover live band artist at 25.
International Sensation: Segun has sold out venues across continents, including London's Broadway Theatre, Cargo Coventry (UK), Terra Kulture Arena (Lagos), and The Opera House (Toronto) - just a few among his many sold-out shows worldwide. mikrotik 6.47.10 exploit
[ Attacker Payload ] │ ▼ (WAN / Port 80/443) ┌───────────────────┐ │ SCEP Server │ │ (RouterOS 6.47) │ └─────────┬─────────┘ │ (Insecure Copy) ▼ [ Heap Buffer Overflow ] ──► [ Arbitrary Code Execution ] Mechanism of the Flaw
and CVE-2020-20252 both involve memory corruption in the /nova/bin/lcdstat process—a component responsible for managing LCD display functions on certain RouterBOARD devices. An authenticated remote attacker can trigger a NULL pointer dereference, crashing the process and potentially the entire system. What makes these vulnerabilities notable is the persistence of the same vulnerable code in routers upgraded to 6.47.10, since the fix was implemented in RouterOS version 6.47 (the stable release), and 6.47.10 is a later long-term build.
Attackers scan the internet for open ports associated with MikroTik services, specifically port 8291 (WinBox), port 8728 (API), or port 80/443 (Webfig).
[ Attacker Payload ] │ ▼ (WAN / Port 80/443) ┌───────────────────┐ │ SCEP Server │ │ (RouterOS 6.47) │ └─────────┬─────────┘ │ (Insecure Copy) ▼ [ Heap Buffer Overflow ] ──► [ Arbitrary Code Execution ] Mechanism of the Flaw
and CVE-2020-20252 both involve memory corruption in the /nova/bin/lcdstat process—a component responsible for managing LCD display functions on certain RouterBOARD devices. An authenticated remote attacker can trigger a NULL pointer dereference, crashing the process and potentially the entire system. What makes these vulnerabilities notable is the persistence of the same vulnerable code in routers upgraded to 6.47.10, since the fix was implemented in RouterOS version 6.47 (the stable release), and 6.47.10 is a later long-term build.
Attackers scan the internet for open ports associated with MikroTik services, specifically port 8291 (WinBox), port 8728 (API), or port 80/443 (Webfig).
