mikrotik-routeros-brute NSE Script

Performs brute force password auditing against Mikrotik RouterOS devices with the API RouterOS interface enabled. Additional information: Script Arguments mikrotik-routeros-brute.threads sets the number of threads. Default: 1 brute.credfile, brute.delay, brute.emptypass, brute.firstonly,...

Mikrotik RouterOS sshd (ROSSSH) - Remote Preauth Heap Corruption

No description provided by source...

sstp-discover NSE Script

Check if the Secure Socket Tunneling Protocol is supported. This is accomplished by trying to establish the HTTPS layer which is used to carry SSTP traffic as described in: - Current SSTP server implementations: - Microsoft Windows Server 2008/Server 2012 - MikroTik RouterOS - SEIL Example...

MikroTik RouterOS - sshd (ROSSSH) Remote Heap Corruption

During an audit the Mikrotik RouterOS sshd ROSSSH has been identified to have a remote previous to authentication heap corruption in its sshd component. Exploitation of this vulnerability will allow full access to the router device. This analysis describes the bug and includes a way to get...

CVE-2012-6050

The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service CPU consumption, read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll...

Cross site request forgery (csrf)

The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service CPU consumption, read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll...

CVE-2012-6050

CVE-2012-6050 affects MikroTik RouterOS where the winbox service (RouterOS 5.15 and earlier) is exploitable. An attacker can remotely trigger a denial of service by consuming CPU, and may read the router version, with possible additional impacts via a request to download the router’s DLLs or plug...

CVE-2012-6050

The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service CPU consumption, read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll...

EUVD-2008-6935

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System NMS settings via a crafted SNMP set request...

MikroTik RouterOS with Blank Password (HTTP)

The remote host is running MikroTik RouterOS without a password for its 'admin' account. Anyone can connect to it and gain administrative access to it. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid39420; scriptversion"1.20"; scriptcvsdate"Date: 2018/11/15 20:50:25"...

MikroTik RouterOS 3.13 - SNMP write (Set request)

MikroTik RouterOS 3.13 - SNMP write Set request / -------------------------------------------------------------------------- c ShadOS 2008 | || || | | |/ / | || | | / - | | ' SNMP Service General Information Summary ... RouterOS supports only Get, which means that you can use this implementation...

Cross site request forgery (csrf)

SNMPd in MikroTik RouterOS 3.2 and earlier allows remote attackers to cause a denial of service daemon crash via a crafted SNMP SET request...

CVE-2008-0680

CVE-2008-0680 affects the SNMP daemon (SNMPd) in MikroTik RouterOS 3.2 and earlier. The underlying issue allows remote attackers to cause a denial of service (daemon crash) by sending a crafted SNMP SET request. The connected records confirm the affected product/version and the observed impact, b...

MikroTik RouterOS Detection

According to one of its service banners, the remote host is running MikroTik RouterOS, a specialized Linux-based operating system that allows Intel-class PCs to act as a network router or access point. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid30212;...

Telnet Banner Reporting

This scripts reports the received banner of a Telnet service. SPDX-FileCopyrightText: 2005 SecuriTeam SPDX-FileCopyrightText: Reworked, improved and extended detection code and pattern since 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C...