CVE-2018-7445

🗓️ 19 Mar 2018 21:00:00Reported by mitreType

Buffer overflow in MikroTik RouterOS SMB service allows remote code execution before authentication. All architectures and devices running RouterOS before 6.41.3/6.42rc27 are vulnerable

Reporter	Title	Published	Views	Family All 27
0day.today	MikroTik RouterOS < 6.41.3/6.42rc27 - SMB Buffer Overflow Exploit	16 Mar 201800:00	–	zdt
ATTACKERKB	CVE-2018-7445	19 Mar 201800:00	–	attackerkb
Circl	CVE-2018-7445	16 Mar 201814:31	–	circl
CISA KEV Catalog	MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability	8 Sep 202200:00	–	cisa_kev
CNVD	MikroTik RouterOS Buffer Overflow Vulnerability	20 Mar 201800:00	–	cnvd
Core Security	MikroTik RouterOS SMB Buffer Overflow	15 Mar 201800:00	–	coresecurity
Check Point Advisories	MikroTik RouterOS SMB Remote Code Execution (CVE-2018-7445)	20 Mar 201800:00	–	checkpoint_advisories
Cvelist	CVE-2018-7445	19 Mar 201821:00	–	cvelist
Tenable Nessus	MikroTik RouterOS < 6.40.7 or 6.41.x < 6.41.3 SMB Buffer Overflow	22 Mar 201800:00	–	nessus
Tenable Nessus	MikroTik RouterOS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2018-7445)	27 Feb 202400:00	–	nessus

NVD

Node

mikrotik routerosRange<6.41.3

mikrotik routerosMatch6.42rc11

mikrotik routerosMatch6.42rc12

mikrotik routerosMatch6.42rc14

mikrotik routerosMatch6.42rc15

mikrotik routerosMatch6.42rc18

mikrotik routerosMatch6.42rc2

mikrotik routerosMatch6.42rc20

mikrotik routerosMatch6.42rc23

mikrotik routerosMatch6.42rc24

mikrotik routerosMatch6.42rc5

mikrotik routerosMatch6.42rc6

mikrotik routerosMatch6.42rc9

Source	Link
securityfocus	www.securityfocus.com/bid/103427
seclists	www.seclists.org/fulldisclosure/2018/Mar/38
coresecurity	www.coresecurity.com/advisories/mikrotik-routeros-smb-buffer-overflow
exploit-db	www.exploit-db.com/exploits/44290/
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog

07 Nov 2025 19:04Current

10High risk

Vulners AI Score10

CVSS 3.19.8

CVSS 210

EPSS0.87557

SSVC