Lucene search
HistoryAug 25, 2022 - 2:15 a.m.
CVE-2022-34960
mikrotik
routeros
container package
arbitrary file
mount points
symbolic links
host device
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
70.9%
The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host.
Affected configurations
Node
mikrotikrouterosMatch7.4beta4-
Related
nessus
nessus
MikroTik RouterOS Link Following (CVE-2022-34960)
2024-02-27 00:00:00
prion
prion
Design/Logic Flaw
2022-08-25 02:15:00
cvelist
cvelist
CVE-2022-34960
2022-08-25 01:50:03
openvas
openvas
MikroTik RouterOS Privilege Escalation Vulnerability (CVE-2022-34960)
2022-08-29 00:00:00
cve
cve
CVE-2022-34960
2022-08-25 02:15:19
CVSS3
9.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
70.9%
Related for NVD:CVE-2022-34960