1262 matches found
Mikrotik RouterOS 缓冲区错误漏洞
Mikrotik RouterOS is an operating system for network devices developed by the Latvian company Mikrotik. Version 6.49.8 of Mikrotik RouterOS contains a buffer error vulnerability. This vulnerability stems from the ASN1STRINGdata function in the nova/lib/www/scep.p library, which processes paramete...
CVE-2026-7668: Out-of-bounds Read
A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1STRINGdata in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulation of the argument transactionID/messageType leads to out-of-bounds read. The attack may be initiated...
PT-2026-36638
A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1 STRING data in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulation of the argument transactionID/messageType leads to out-of-bounds read. The attack may be initiat...
CVE-2021-27221
MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor's position is that this is intended behavior because of how user policies work...
📄 MikroTik RouterOS WinBox 3.41 Username Enumeration
Proof of concept exploit for MikroTik RouterOS WinBox version 3.41 that demonstrates a username enumeration vulnerability. ============================================================================================================================================= | Title : MikroTik RouterOS WinB...
📄 MikroTik RouterOS 6.40.10 Denial of Service
This exploit targets a vulnerability in the MikroTik RouterOS SMB service, allowing remote attackers to crash the SMB process and render services unavailable. Specially crafted SMB packets trigger an abnormal condition, leading to a denial of service, requiring manual restart or reboot of the...
Exploit for Out-of-bounds Write in Mikrotik Routeros
Mikrotik Exploit Scan and Export RouterOS Password A security...
CVE-2019-16160
An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service...
The vulnerability of the WinBox service on the RouterOS operating system of MikroTik allows a hacker to gain unauthorized access to protected information.
The vulnerability of the WinBox service on the RouterOS operating system of MikroTik is related to discrepancies in the size of responses between attempts to connect with valid and invalid user names. Exploiting this vulnerability can allow a malicious actor, operating remotely, to gain...
MikroTik RouterOS 7.x Buffer Overflow Vulnerability
MikroTik RouterOS is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2025 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/o:mikrotik:routeros"...
The vulnerability in the WebFig web interface of MikroTik RouterOS and SwitchOS allows a hacker to obtain authentication data.
The vulnerability of the WebFig web interface in MikroTik RouterOS and SwitchOS lies in the transmission of credentials in an unencrypted form. Exploiting this vulnerability allows a remote attacker to obtain authentication data by sending specially crafted HTTP requests...
CVE-2025-61481
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials...
EUVD-2025-36192
An issue in MikroTik RouterOS v.7.14.2 and SwitchOS v.2.18 allows a remote attacker to execute arbitrary code via the HTTP- only WebFig management component...
CVE-2025-61481
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials...
CVE-2025-61481
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials...
CVE-2025-61481: Exposure of Sensitive Information to an Unauthorized Actor
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials...
MikroTik RouterOS和MikroTik RouterOS 7 安全漏洞
MikroTik RouterOS and MikroTik RouterOS 7 are both products of the Latvian company MikroTik.MikroTik RouterOS is a router operating system developed on Linux. The system can be deployed in a PC to make it provide router functionality.MikroTik RouterOS 7 is an operating system... A security...
CVE-2025-61481
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default. This configuration flaw allows an on-path attacker to intercept credentials or execute injected JavaScript in the administrator's browser. Furthermore, the vulnerability ...
CVE-2025-61481
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials...
The vulnerability of the RouterOS operating system in MikroTik routers, related to deficiencies in access control, allows attackers to compromise the confidentiality and integrity of protected information.
The vulnerability of the RouterOS operating system for MikroTik relates to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to compromise the confidentiality and integrity of the protected information...