OpenSSL: CVE-2022-0778

OpenSSL is suffering a vulnerability again:
https://www.openssl.org/news/vulnerabilities.html#CVE-2022-0778

The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. […]

As RouterOS uses openssl and supports non-prime moduli certificates (so this is about elliptic curve certificates) I guess it could be vulnerable to DOS attacks.

Any official statement from MikroTik?

Anyway… For now you should make sure that encrypted services (for example https) are not exposed to the public if possible.

Wondering if no answer is a good or bad indication…
Perhaps I should try an exploit myself to find out.