Mikrotik RouterOS 6.28 FTP Buffer Overflow

import time import socket from ftplib import FTP import struct mikrotik RouterOS v6.28 FTp CWD command Buffer Overflow sultan albalawi win7 from subprocess import host='192.168.88.1' port=21 u = ""username p = ""password def myB: myB=...

MikroTik RouterOS Packet Flooding Multiple DoS Vulnerabilities (May 2017)

MikroTik router is prone to multiple denial of service DoS vulnerabilities. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MikroTik RouterOS HTTP Server Arbitrary Write RCE (ChimayRed)

The MikroTik RouterOS software running on the remote host is affected by a flaw in its HTTP web server process due to improper validation of user-supplied input. An unauthenticated, remote attacker can exploit this, via a specially crafted POST request, to write data to an arbitrary location with...

MikroTik RouterOS 'L2TP' Man-in-the-Middle Attack Vulnerability (Feb 2017)

MikroTik RouterOS is prone to a man in the middle attack vulnerability. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

MikroTik RouterOS Detection Consolidation

Consolidation of MikroTik RouterOS detections. SPDX-FileCopyrightText: 2017 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

MikroTik RouterOS L2TP Client Man-in-the-Middle Attack Vulnerability

MikroTik RouterOS is a routing operating system developed on the Linux kernel. A security vulnerability in the L2TP Client of MikroTik RouterOS allows remote attackers to exploit the vulnerability to gain unauthorized access to an L2TP server via a man-in-the-middle attack...

CVE-2017-6297

The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...

CVE-2017-6297

The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...

Code injection

The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...

CVE-2017-6297

The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...

CVE-2017-6297

The CVE-2017-6297 entry concerns MikroTik RouterOS L2TP Client in versions 6.83.3 and 6.37.4. The vulnerability arises because IPsec encryption is not enabled after a reboot, enabling man-in-the-middle attackers to view unencrypted data and potentially access networks on the L2TP server by monito...

CVE-2017-6297: Missing Encryption of Sensitive Data

The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and...

PT-2017-16976

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions 6.37.4 through 6.83.3 Description The issue concerns the L2TP Client in MikroTik RouterOS, which fails to enable IPsec encryption after a reboot. This allows man-in-the-middle attackers to intercept and view...

Mikrotik Router Remote Denial Of Service (CVE-2012-6050)

A vulnerability in the Winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service CPU consumption, read the router version, and possibly have additional impact via a request to download the router's DLLs or plugins...

MikroTik RouterOS Admin Password Change (CVE-2015-2350)

A vulnerability exists in MicroTik RouterOS, allowing an attacker to force an end-user to carry out undesired actions on the web application where the user is currently authenticated...

MikroTik RouterOS SNMP Security Bypass (CVE-2008-6976)

MikroTik RouterOS is prone to a security-bypass vulnerability because the software fails to sufficiently sanitize SNMP requests. Successfully exploiting this issue allows attackers to write to and change certain aspects of the Network Management System NMS. This may aid in further attacks. Versio...

MikroTik RouterOS Cross-Site Scripting Vulnerability

MikroTik RouterOS is a set of routing operating system developed based on Linux core by MikroTik Latvia. The system turns a PC computer into a professional router. A cross-site scripting vulnerability exists in MikroTik RouterOS version 6.36.2. Due to the program failing to adequately filter...

MikroTik RouterOS 6.36.2 Cross Site Scripting

Title: RouterOS v6.36.2 - Cross Site Scripting Type: Local/Remote Author: Nassim Asrir Author Company: HenceForth Risk: 3/5 Release Date: 11.11.2016 Summary: MikroTik RouterOS is the operating system of MikroTik RouterBOARD hardware. It can also be installed on a PC and will turn it into a router...

MikroTik RouterOS cross-site request forgery vulnerability

No description provided by source...

Web interface for DNSmasq / Mikrotik - SQL Injection

Exploit for php platform in category web applications / + Credits: hyp3rlinx Vendor: ==================== tmcdos / sourceforge Product: ====================== dnsdhcp Web Interface Download: sourceforge.net/projects/dnsmasq-mikrotik-admin/?source=directory This is a very simple web interface for...