Lucene search
PRIOn knowledge basePRION:CVE-2017-6297HistoryFeb 27, 2017 - 7:59 a.m.
Code injection
2017-02-2707:59:00
PRIOn knowledge base
www.prio-n.com
3
The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and obtaining the L2TP secret.
Related
cve
cve
CVE-2017-6297
2017-02-27 07:59:00
openvas
openvas
MikroTik RouterOS 'L2TP' Man-in-the-Middle Attack Vulnerability
2017-03-09 00:00:00
nessus
nessus
MikroTik RouterOS Missing Encryption of Sensitive Data (CVE-2017-6297)
2024-02-27 00:00:00
cvelist
cvelist
CVE-2017-6297
2017-02-27 07:25:00
nvd
nvd
CVE-2017-6297
2017-02-27 07:59:00