1013 matches found
CVE-2021-27221
MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor's position is that this is intended behavior because of how user policies work...
📄 MikroTik RouterOS WinBox 3.41 Username Enumeration
Proof of concept exploit for MikroTik RouterOS WinBox version 3.41 that demonstrates a username enumeration vulnerability. ============================================================================================================================================= | Title : MikroTik RouterOS WinB...
📄 MikroTik RouterOS 6.40.10 Denial of Service
This exploit targets a vulnerability in the MikroTik RouterOS SMB service, allowing remote attackers to crash the SMB process and render services unavailable. Specially crafted SMB packets trigger an abnormal condition, leading to a denial of service, requiring manual restart or reboot of the...
Exploit for Out-of-bounds Write in Mikrotik Routeros
Mikrotik Exploit Scan and Export RouterOS Password A security...
CVE-2019-16160
An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service...
MikroTik RouterOS 7.x Buffer Overflow Vulnerability
MikroTik RouterOS is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:mikrotik:routeros"...
CVE-2025-61481
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials...
EUVD-2025-36192
An issue in MikroTik RouterOS v.7.14.2 and SwitchOS v.2.18 allows a remote attacker to execute arbitrary code via the HTTP- only WebFig management component...
CVE-2025-61481
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials...
CVE-2025-61481
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials...
MikroTik RouterOS和MikroTik RouterOS 7 安全漏洞
MikroTik RouterOS and MikroTik RouterOS 7 are both products of the Latvian company MikroTik.MikroTik RouterOS is a router operating system developed on Linux. The system can be deployed in a PC to make it provide router functionality.MikroTik RouterOS 7 is an operating system... A security...
CVE-2025-61481
The CVE-2025-61481 entry concerns MikroTik RouterOS v7.14.2 and SwOS v2.18 (also SwitchOS v2.18 in related disclosures) where the WebFig management interface is exposed over cleartext HTTP by default. This misconfiguration allows an on‑path attacker to inject JavaScript in the administrator’s bro...
CVE-2025-61481
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials...
PT-2025-43960
Name of the Vulnerable Software and Affected Versions MikroTik RouterOS version 7.14.2 MikroTik SwitchOS version 2.18 Description An issue exists in MikroTik RouterOS and SwitchOS where the WebFig management interface is exposed over cleartext HTTP by default. This allows a remote attacker to...
EUVD-2020-12998
Malware in sbrugna...
EUVD-2020-15601
Malware in sbrugna...
EUVD-2020-13012
Malware in sbrugna...
EUVD-2020-13000
Malware in sbrugna...