Lucene search

K

WinBox Security Vulnerabilities

cve
cve

CVE-2020-5721

MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field is set and no Master Password is set. Keep Password is set by default and, by default Master Password is not set. An attacker with access to the configuration....

5.5CVSS

5.7AI Score

0.001EPSS

2020-04-15 09:15 PM
36
cve
cve

CVE-2020-5720

MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions. WinBox is vulnerable to this attack if it connects to a malicious endpoint or if an attacker mounts a man in the middle...

5.9CVSS

5.8AI Score

0.001EPSS

2020-02-06 05:15 PM
31
cve
cve

CVE-2019-3981

MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed...

3.7CVSS

4.4AI Score

0.001EPSS

2020-01-14 07:15 PM
25
cve
cve

CVE-2005-1606

H-Sphere Winbox 2.4.2 and 2.4.3 RC1 stores sensitive information such as username and password in plaintext in world-readable log files, which allows local users to gain...

6.7AI Score

0.0004EPSS

2005-05-16 04:00 AM
20