Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2018-7445
HistoryMar 19, 2018 - 9:29 p.m.

CVE-2018-7445

2018-03-1921:29:01
CWE-119
[email protected]
web.nvd.nist.gov
7

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.822

Percentile

98.5%

JSON

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.

Affected configurations

Nvd
Node
mikrotikrouterosRange<6.41.3
Node
mikrotikrouterosMatch6.4.2rc11
OR
mikrotikrouterosMatch6.4.2rc12
OR
mikrotikrouterosMatch6.4.2rc14
OR
mikrotikrouterosMatch6.4.2rc15
OR
mikrotikrouterosMatch6.4.2rc18
OR
mikrotikrouterosMatch6.4.2rc2
OR
mikrotikrouterosMatch6.4.2rc20
OR
mikrotikrouterosMatch6.4.2rc23
OR
mikrotikrouterosMatch6.4.2rc24
OR
mikrotikrouterosMatch6.4.2rc27
OR
mikrotikrouterosMatch6.4.2rc5
OR
mikrotikrouterosMatch6.4.2rc6
OR
mikrotikrouterosMatch6.4.2rc9
VendorProductVersionCPE
mikrotikrouteros*cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*
mikrotikrouteros6.4.2cpe:2.3:o:mikrotik:routeros:6.4.2:rc11:*:*:*:*:*:*
mikrotikrouteros6.4.2cpe:2.3:o:mikrotik:routeros:6.4.2:rc12:*:*:*:*:*:*
mikrotikrouteros6.4.2cpe:2.3:o:mikrotik:routeros:6.4.2:rc14:*:*:*:*:*:*
mikrotikrouteros6.4.2cpe:2.3:o:mikrotik:routeros:6.4.2:rc15:*:*:*:*:*:*
mikrotikrouteros6.4.2cpe:2.3:o:mikrotik:routeros:6.4.2:rc18:*:*:*:*:*:*
mikrotikrouteros6.4.2cpe:2.3:o:mikrotik:routeros:6.4.2:rc2:*:*:*:*:*:*
mikrotikrouteros6.4.2cpe:2.3:o:mikrotik:routeros:6.4.2:rc20:*:*:*:*:*:*
mikrotikrouteros6.4.2cpe:2.3:o:mikrotik:routeros:6.4.2:rc23:*:*:*:*:*:*
mikrotikrouteros6.4.2cpe:2.3:o:mikrotik:routeros:6.4.2:rc24:*:*:*:*:*:*
Rows per page:
1-10 of 141

Related

zdt 1
exploitdb 1
coresecurity 1
cisa_kev 1
prion 1
packetstorm 1
saint 3
checkpoint_advisories 1
attackerkb 1
openvas 1
cve 1
nessus 2
seebug 1
cvelist 1
myhack58 1
threatpost 1
securelist 2
thn 1
zdt
zdt
MikroTik RouterOS < 6.41.3/6.42rc27 - SMB Buffer Overflow Exploit
2018-03-16 00:00:00
exploitdb
exploitdb
MikroTik RouterOS &lt; 6.41.3/6.42rc27 - SMB Buffer Overflow
2018-03-15 00:00:00
coresecurity
coresecurity
MikroTik RouterOS SMB Buffer Overflow
2018-03-15 00:00:00
cisa_kev
cisa_kev
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
2022-09-08 00:00:00
prion
prion
Buffer overflow
2018-03-19 21:29:00
packetstorm
packetstorm
MikroTik RouterOS SMB Buffer Overflow
2018-03-15 00:00:00
saint
saint
MicroTik RouterOS SMB buffer overflow
2018-04-02 00:00:00
MicroTik RouterOS SMB buffer overflow
2018-04-02 00:00:00
MicroTik RouterOS SMB buffer overflow
2018-04-02 00:00:00
checkpoint_advisories
checkpoint_advisories
MikroTik RouterOS SMB Remote Code Execution (CVE-2018-7445)
2018-03-20 00:00:00
attackerkb
attackerkb
CVE-2018-7445
2018-03-19 00:00:00
openvas
openvas
MikroTik RouterOS RCE Vulnerability
2018-03-28 00:00:00
cve
cve
CVE-2018-7445
2018-03-19 21:29:01
nessus
nessus
MikroTik RouterOS < 6.40.7 or 6.41.x < 6.41.3 SMB Buffer Overflow
2018-03-22 00:00:00
MikroTik RouterOS Improper Restriction of Operations within the Bounds of a Memory Buffer (CVE-2018-7445)
2024-02-27 00:00:00
seebug
seebug
MikroTik RouterOS SMB Buffer Overflow(CVE-2018-7445)
2018-03-16 00:00:00
cvelist
cvelist
CVE-2018-7445
2018-03-19 21:00:00
myhack58
myhack58
Router vulnerability analysis the sixth bullet: CVE-2018-7445 MikroTik router system buffer overflow vulnerability-vulnerability warning-the black bar safety net
2018-04-24 00:00:00
threatpost
threatpost
How MikroTik Routers Became a Cybercriminal Target
2021-12-09 15:56:16
securelist
securelist
APT Trends report Q1 2018
2018-04-12 10:00:17
New trends in the world of IoT threats
2018-09-18 10:00:36
thn
thn
Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs
2021-12-09 11:15:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

10

Confidence

High

EPSS

0.822

Percentile

98.5%

JSON
Related for NVD:CVE-2018-7445
zdt1exploitdb1coresecurity1cisa_kev1prion1packetstorm1saint3checkpoint_advisories1attackerkb1openvas1cve1nessus2seebug1cvelist1myhack581threatpost1securelist2thn1