Mikrotik Configuration Importer

This module imports a Mikrotik device configuration. Module Options msf use auxiliary/admin/networking/mikrotikconfig msf auxiliarymikrotikconfig show actions ...actions... msf auxiliarymikrotikconfig set ACTION msf auxiliarymikrotikconfig show options ...show and set options... msf...

The vulnerability of the RouterOS operating system’s Traceroute service allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system’s Traceroute service is related to the execution of operations beyond the buffer limits in memory. Exploiting this vulnerability allows a malicious actor to cause a service failure by sending a specially crafted packet...

The vulnerability of the CERM Crypto Export Restrictions Manager implementation in the RouterOS operating system of MikroTik allows a perpetrator to trigger a service failure.

The vulnerability of the CERM Crypto Export Restrictions Manager implementation in the RouterOS operating system of MikroTik relates to the uncontrolled use of resources. Exploiting this vulnerability could allow a malicious actor to cause service interruptions by sending a specially crafted...

PT-2020-6607

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS version 6.47 Description The issue is related to a buffer overflow in memory, which can be exploited by a remote attacker using a specially crafted FTP request, potentially leading to a denial of service. Recommendations For...

PT-2020-6606

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS version 6.47 Description A buffer overflow in the operating system allows unauthenticated attackers to cause a denial of service via crafted SMB requests. The issue is related to an operation exceeding the buffer boundaries i...

MikroTik RouterOS Null Pointer Dereference / Division-By-Zero Vulnerability

MikroTik RouterOS versions prior to stable 6.47 suffer from multiple null pointer dereference vulnerabilities and one division-by-zero vulnerability. MikroTik RouterOS Null Pointer Dereference / Division-By-Zero Vulnerability Details ======= Product: MikroTik's RouterOS Affected Versions: through...

Exploit for Improper Validation of Array Index in Mikrotik Routeros

CVE-2020-11881 MikroTik SMB Remote Denial of Service DoS...

MikroTik RouterOS Denial Of Service / Memory Corruption Vulnerability

MikroTik RouterOS suffers from two vulnerabilities. The cerm process suffers from an uncontrolled resource consumption issue. By sending a crafted packet, an authenticated remote user can cause a high cpu load, which may make the device respond slowly or unable to respond. Versions until stable...

PT-2020-3074

Name of the Vulnerable Software and Affected Versions RouterOS affected versions not specified Description The issue is related to a buffer overflow in the Traceroute service of RouterOS, used in MikroTik routers. This can be exploited by a remote attacker, who can cause a denial of service by...

PT-2020-3073

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description The issue is related to the implementation of the CERM crypto export restrictions manager in the RouterOS operating system of MikroTik routers. It involves uncontrolled resource...

MikroTik RouterOS <= 6.44.3 DoS Vulnerability

MikroTik RouterOS is prone to a denial of service DoS vulnerability in the SSH daemon. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MikroTik RouterOS DNS Cache Poisoning (CVE-2019-3978)

Binary data mikrotikcve-2019-3978.nbin...

PT-2020-1957

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions through 6.44.3 Description The issue is related to uncontrolled resource management in the SSH daemon of MikroTik routers. This could allow remote attackers to generate CPU activity, trigger refusal of new authorized...

PT-2020-6923 · Mikrotik · Mikrotik Routeros

Name of the Vulnerable Software and Affected Versions: MikroTik Router versions 6.46.3 and earlier Description: The issue allows an attacker to cause a denial of service via misconfiguration in the SSH daemon, potentially leading to uncontrolled resource consumption. This can be exploited by a...

CVE-2018-5951

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

Code injection

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

CVE-2018-5951

MikroTik RouterOS is affected by CVE-2018-5951. The issue arises when a 1-byte packet is crafted and sent to a RouterOS IPv6 address using IP Protocol 97, which will cause the RouterOS device to reboot imminently. All RouterOS versions that support EoIPv6 are vulnerable. Connected documents confi...

CVE-2018-5951

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

PT-2020-8935

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS affected versions not specified Description An issue was discovered in Mikrotik RouterOS where crafting a packet with a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterO...

CVE-2018-5951: Undefined Security Weakness

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...