753 matches found
PT-2020-12915
Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions 6.41.3 through 6.46.5 MikroTik RouterOS versions 7.x through 7.0 Beta5 Description The issue is related to an array index error that can be exploited by an unauthenticated remote attacker to crash the SMB server. Thi...
MikroTik RouterOS Memory Corruption / NULL Pointer Dereference Vulnerbilities
MikroTik RouterOS suffers from NULL pointer dereference, memory corruption and division by zero vulnerabilities. Advisory: three vulnerabilities found in MikroTik's RouterOS Details ======= MikroTik RouterOS Memory Corruption / NULL Pointer Dereference Vulnerbilities Product: MikroTik's RouterOS...
Denial of Service Vulnerability in MikroTik RouterOS
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. MikroTik RouterOS suffers from a denial of service vulnerability that can be exploited by an attacker to cause the...
Mikrotik RouterOS NULL Pointer Dereference / Reachable Assertion Failure Vulnerabilities
Mikrotik RouterOS NULL Pointer Dereference / Reachable Assertion Failure Details ======= Product: MikroTik's RouterOS Vendor URL: https://mikrotik.com/ Vendor Status: fixed version released CVE: - Credit: Qian Chen@cq674350529 of Qihoo 360 Nirvan Team Product Description ================== Router...
PT-2020-6607
Name of the Vulnerable Software and Affected Versions MikroTik RouterOS version 6.47 Description The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker using a specially crafted FTP request, potentially leading to a denial of service. Recommendations For...
PT-2020-6606
Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS version 6.47 Description A buffer overflow in the operating system allows unauthenticated attackers to cause a denial of service via crafted SMB requests. The issue is related to an operation exceeding the buffer boundaries i...
MikroTik RouterOS Null Pointer Dereference / Division-By-Zero Vulnerability
MikroTik RouterOS versions prior to stable 6.47 suffer from multiple null pointer dereference vulnerabilities and one division-by-zero vulnerability. MikroTik RouterOS Null Pointer Dereference / Division-By-Zero Vulnerability Details ======= Product: MikroTik's RouterOS Affected Versions: through...
PT-2020-3073
Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description The issue is related to the implementation of the CERM crypto export restrictions manager in the RouterOS operating system of MikroTik routers. It involves uncontrolled resource...
MikroTik RouterOS DNS Cache Poisoning (CVE-2019-3978)
Binary data mikrotikcve-2019-3978.nbin...
PT-2020-1957
Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions through 6.44.3 Description The issue is related to uncontrolled resource management in the SSH daemon of MikroTik routers. This could allow remote attackers to generate CPU activity, trigger refusal of new authorized...
PT-2020-6923 · Mikrotik · Mikrotik Routeros
Name of the Vulnerable Software and Affected Versions: MikroTik Router versions 6.46.3 and earlier Description: The issue allows an attacker to cause a denial of service via misconfiguration in the SSH daemon, potentially leading to uncontrolled resource consumption. This can be exploited by a...
PT-2020-8935
Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS affected versions not specified Description An issue was discovered in Mikrotik RouterOS where crafting a packet with a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterO...
CVE-2018-5951: Undefined Security Weakness
An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...
The vulnerability of the RouterOS operating system in MikroTik routers, related to the assignment of the zero pointer, allows a hacker to cause a service failure.
The vulnerability of the RouterOS operating system for MikroTik routers exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially created package...
MikroTik's RouterOS Console Process Memory Corruption Vulnerability
RouterOS is the operating system used on MikroTik devices such as switches, routers and access points. A memory corruption vulnerability exists in MikroTik's RouterOS console process. A null pointer reference that allows an authenticated remote attacker to send a carefully crafted packet causes t...
PT-2020-1559
Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description The issue is related to a null pointer dereference in the RouterOS operating system of MikroTik routers. It can be exploited by a remote attacker using a specially crafted packet to...
PT-2020-1560
Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description The issue is related to insufficient input validation in the RouterOS operating system of MikroTik routers. This can be exploited by a remote attacker using a specially crafted pack...
The vulnerability of the implementation of the .NPK-file processing mechanism in the RouterOS operating system of MikroTik allows a hacker to create arbitrary directories and execute arbitrary shell commands.
The vulnerability of the RouterOS operating system’s .NPK-file processing mechanism in MikroTik routers involves bypassing the relative path. Exploiting this vulnerability allows a malicious actor to create arbitrary directories and execute arbitrary shell commands using the malicious update...
MikroTik RouterOS 6.45.6 DNS Cache Poisoning
Exploit Title: MikroTik RouterOS 6.45.6 - DNS Cache Poisoning Date: 2019-10-30 Exploit Author: Jacob Baines Vendor Homepage: https://mikrotik.com/ Software Link: https://mikrotik.com/download Version: 6.45.6 Stable and below or 6.44.5 Long-term and below Tested on: Various x86 and MIPSBE RouterOS...
