1334 matches found
PT-2023-3875
Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions prior to 6.49.7 MikroTik RouterOS long-term versions prior to 6.48.7 Description The issue is related to a privilege escalation problem in the Winbox and HTTP interfaces of MikroTik RouterOS. A remote and authenticat...
MikroTik RouterOS 安全漏洞
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in a PC to enable it to provide router functionality. A security vulnerability exists in MikroTik RouterOS versions prior to 6.49.7 stable, prior to 6.48.6 long-term,...
CVE-2023-30799: Improper Privilege Management
MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary...
The vulnerability of the radvd (Router Advertisement Daemon) component of the RouterOS operating system in MikroTik routers allows a hacker to execute arbitrary code.
The vulnerability of the radvd Router Advertisement Daemon component of the RouterOS operating system in MikroTik routers stems from the operation of writing data beyond the buffer in memory when processing data entered by the user. Exploiting this vulnerability allows a remote attacker to execut...
Vulnerability fixed in MikroTik RouterOS
MikroTik has fixed a vulnerability in RouterOS. A unauthenticated malicious person could potentially abuse it to execute arbitrary code. To do so, malicious network traffic should be sent to the vulnerable device. sent. MikroTik indicates that systems are only vulnerable when they are use a...
PT-2023-17682 · Undefined · Undefined
Исследователи начинают раскрывать результаты своей работы, которые демонстрировались в рамках хакерского турнира Pwn2Own, проведенного ZDI в декабре прошлого года. Не отстают и поставщики, правда не все. Исследователь Нгуен Хоанг Тхоч из STAR Labs опубликовал подробности двух уязвимостей в VMWare...
(0Day) (Pwn2Own) Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability
This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Mikrotik RouterOS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Router Advertisement Daemon. The issue results from the lack of proper...
PT-2023-4988
Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions prior to 6.49.10 Description The web server used by MikroTik RouterOS is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTT...
The vulnerability of the bridge2 component of the Bridge interface in the RouterOS operating system of MikroTik routers allows a hacker to cause a service failure.
The vulnerability of the bridge2 component in the Bridge interface of the RouterOS operating system for MikroTik relates to errors during resource release. Exploiting this vulnerability allows a malicious actor to cause service failure by sending specially crafted packets...
CVE-2023-24094
An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service DoS via crafted packets...
CVE-2023-24094
An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service DoS via crafted packets...
Design/Logic Flaw
An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service DoS via crafted packets...
CVE-2023-24094
An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service DoS via crafted packets...
CVE-2023-24094
An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service DoS via crafted packets...
CVE-2023-24094: Out-of-bounds Write
An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service DoS via crafted packets...
MikroTik RouterOS 缓冲区错误漏洞
MikroTik RouterOS is a Linux-based router operating system developed by the Latvian company MikroTik. The system can be deployed in PCs to enable them to provide router functionality. A security vulnerability exists in MikroTik RouterOS version v6.40.5, which stems from a problem in the bridge2...
CVE-2023-24094
CVE-2023-24094 affects MikroTik RouterOS v6.40.5 in the bridge2 component, enabling a Denial of Service (DoS) via crafted packets. Root cause is a vulnerability in bridge2/resource handling. Affected product: RouterOS 6.40.5; impact: DoS with high severity per CVSS 3.1 (AV:N/AC:L/PR:N/UI:N/S:U/C:...
The vulnerability of the RouterOS operating system in MikroTik routers stems from incorrect handling of the link pointer before accessing a file. This allows a hacker to install any arbitrary file anywhere on the host.
The vulnerability of the RouterOS operating system for MikroTik routers stems from an incorrect definition of the link before accessing a file. Exploiting this vulnerability allows a malicious actor to install any arbitrary file anywhere on the host...
The vulnerability of the RouterOS operating system’s web server allows a hacker to execute arbitrary code. This vulnerability exists in MikroTik routers.
The vulnerability in the RouterOS web server of the MikroTik operating system involves the execution of operations beyond the buffer in memory. Exploiting this vulnerability allows a malicious actor to execute arbitrary code by sending specially crafted HTTP requests...
PT-2022-6614
Name of the Vulnerable Software and Affected Versions Mikrotik RouterOS affected versions not specified Description The issue is related to a buffer overflow in the radvd daemon of Mikrotik RouterOS, which occurs when processing user-supplied data. This can be exploited by a remote attacker to...