PT-2020-3073

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description The issue is related to the implementation of the CERM crypto export restrictions manager in the RouterOS operating system of MikroTik routers. It involves uncontrolled resource...

MikroTik RouterOS <= 6.44.3 DoS Vulnerability

MikroTik RouterOS is prone to a denial of service DoS vulnerability in the SSH daemon. SPDX-FileCopyrightText: 2020 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MikroTik RouterOS DNS Cache Poisoning (CVE-2019-3978)

Binary data mikrotikcve-2019-3978.nbin...

PT-2020-1957

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions through 6.44.3 Description The issue is related to uncontrolled resource management in the SSH daemon of MikroTik routers. This could allow remote attackers to generate CPU activity, trigger refusal of new authorized...

PT-2020-6923 · Mikrotik · Mikrotik Routeros

Name of the Vulnerable Software and Affected Versions: MikroTik Router versions 6.46.3 and earlier Description: The issue allows an attacker to cause a denial of service via misconfiguration in the SSH daemon, potentially leading to uncontrolled resource consumption. This can be exploited by a...

CVE-2018-5951

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

Code injection

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

CVE-2018-5951

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

CVE-2018-5951

MikroTik RouterOS is affected by CVE-2018-5951. The issue arises when a 1-byte packet is crafted and sent to a RouterOS IPv6 address using IP Protocol 97, which will cause the RouterOS device to reboot imminently. All RouterOS versions that support EoIPv6 are vulnerable. Connected documents confi...

PT-2020-8935

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS affected versions not specified Description An issue was discovered in Mikrotik RouterOS where crafting a packet with a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterO...

CVE-2018-5951: Undefined Security Weakness

An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack...

MikroTik WinBox Path Traversal Vulnerability

MikroTik RouterOS is a routing operating system, developed based on the Linux kernel, compatible with x86 PC routing software, through which a standard PC computer can be turned into a professional router.Winbox is a Windows-based software for remote management of RouterOS, providing an intuitive...

The vulnerability of the RouterOS operating system in MikroTik routers, related to the assignment of the zero pointer, allows a hacker to cause a service failure.

The vulnerability of the RouterOS operating system for MikroTik routers exists due to insufficient testing of input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause service failures using a specially created package...

MikroTik's RouterOS Console Process Memory Corruption Vulnerability

RouterOS is the operating system used on MikroTik devices such as switches, routers and access points. A memory corruption vulnerability exists in MikroTik's RouterOS console process. A null pointer reference that allows an authenticated remote attacker to send a carefully crafted packet causes t...

MikroTik's RouterOS Console Process Assertion Failure Vulnerability

RouterOS is the operating system used on MikroTik devices such as switches, routers and access points. A memory corruption vulnerability exists in MikroTik's RouterOS console process. A remote attacker who allows authentication could crash the console process by sending carefully crafted packets...

PT-2020-1560

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description The issue is related to insufficient input validation in the RouterOS operating system of MikroTik routers. This can be exploited by a remote attacker using a specially crafted pack...

PT-2020-1559

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS affected versions not specified Description The issue is related to a null pointer dereference in the RouterOS operating system of MikroTik routers. It can be exploited by a remote attacker using a specially crafted packet to...

The vulnerability of the implementation of the .NPK-file processing mechanism in the RouterOS operating system of MikroTik allows a hacker to create arbitrary directories and execute arbitrary shell commands.

The vulnerability of the RouterOS operating system’s .NPK-file processing mechanism in MikroTik routers involves bypassing the relative path. Exploiting this vulnerability allows a malicious actor to create arbitrary directories and execute arbitrary shell commands using the malicious update...

The vulnerability of the RouterOS operating system’s automatic update function in MikroTik routers allows a intruder to gain unauthorized access to protected information.

The vulnerability of the RouterOS operating system’s automatic update function for MikroTik routers involves loading code without checking its integrity. Exploiting this vulnerability allows a malicious actor, operating remotely, to gain unauthorized access to protected information by resetting t...

The vulnerability of the RouterOS operating system, which arises due to insufficient validation of input data, allows a hacker to cause damage to the integrity of DNS system data.

The vulnerability of the RouterOS operating system exists due to insufficient checks on input data. Exploiting this vulnerability can allow a malicious actor, operating remotely, to cause damage to the integrity of DNS system data...