Cross site scripting

An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of intercepting client traffic to act as a malicious OpenVPN server. This may allow the attacker to gain access to the client's internal network fo...

CVE-2018-10066

An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of intercepting client traffic to act as a malicious OpenVPN server. This may allow the attacker to gain access to the client's internal network fo...

CVE-2018-10066

An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of intercepting client traffic to act as a malicious OpenVPN server. This may allow the attacker to gain access to the client's internal network fo...

CVE-2018-10066

An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of intercepting client traffic to act as a malicious OpenVPN server. This may allow the attacker to gain access to the client's internal network fo...

CVE-2018-10066

CVE-2018-10066 affects MikroTik RouterOS 6.41.4. The issue is missing OpenVPN server certificate verification, allowing a remote unauthenticated attacker who can intercept client traffic to impersonate a legitimate OpenVPN server and potentially access the client’s internal network (e.g., via sit...

MikroTik RouterOS Elevation of Privilege Vulnerability

MikroTik RouterOS is a set of routing operating system developed based on Linux core by MikroTik Latvia. The system turns a PC computer into a professional router. A security vulnerability exists in MikroTik RouterOS version 6.41.4, which stems from the program's lack of OpenVPN server certificat...

MicroTik RouterOS SMB buffer overflow

Added: 04/02/2018 CVE: CVE-2018-7445 BID: 103427 Background RouterOS is a Linux-based operating system used by MicroTik devices. Problem A buffer overflow in the SMB service could allow a remote, unauthenticated attacker to execute arbitrary commands. Resolution Upgrade to RouterOS 6.41.3 or...

MicroTik RouterOS SMB buffer overflow

Added: 04/02/2018 CVE: CVE-2018-7445 BID: 103427 Background RouterOS is a Linux-based operating system used by MicroTik devices. Problem A buffer overflow in the SMB service could allow a remote, unauthenticated attacker to execute arbitrary commands. Resolution Upgrade to RouterOS 6.41.3 or...

MicroTik RouterOS SMB buffer overflow

Added: 04/02/2018 CVE: CVE-2018-7445 BID: 103427 Background RouterOS is a Linux-based operating system used by MicroTik devices. Problem A buffer overflow in the SMB service could allow a remote, unauthenticated attacker to execute arbitrary commands. Resolution Upgrade to RouterOS 6.41.3 or...

VulnCheck KEV: CVE-2017-20149

The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37.5, aka Chimay-Red. A remote and unauthenticated user can trigger the vulnerability by sending a crafted HTTP request. An attacker can use this vulnerability to execute arbitrary code on...

MikroTik RouterOS < 6.41.3 RCE Vulnerability

MikroTik RouterOS is prone to a remote code execution RCE vulnerability in the SMB service. SPDX-FileCopyrightText: 2018 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE...

MikroTik RouterOS < 6.40.7 or 6.41.x < 6.41.3 SMB Buffer Overflow

According to its self-reported version, the remote networking device is running a version of MikroTik RouterOS prior to 6.40.7 or 6.41.x prior to 6.41.3. It is, therefore, affected by a remote SMB buffer overflow vulnerability that can be leveraged by an unauthenticated, remote attacker to execut...

MikroTik RouterOS SMB Remote Code Execution (CVE-2018-7445)

A buffer overflow vulnerability exists in MikroTik RouterOS. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

MikroTik RouterOS Buffer Overflow Vulnerability

MikroTik RouterOS is a routing operating system developed by MikroTik based on the Linux kernel, which can be installed to turn a standard x86 PC device into a professional router. A buffer overflow vulnerability exists in MikroTik RouterOS 6.41.3 and earlier versions. The vulnerability stems fro...

CVE-2018-7445

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is...

CVE-2018-7445

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is...

Buffer overflow

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is...

CVE-2018-7445

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is...

CVE-2018-7445

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is...

CVE-2018-7445

CVE-2018-7445 : MikroTik RouterOS SMB service has a buffer overflow when processing NetBIOS session requests. It allows unauthenticated remote code execution on all devices/architectures running RouterOS before versions 6.41.3 or 6.42rc27. Public references indicate PoC/exploits exist (e.g., Expl...