1013 matches found
MikroTik RouterOS Path Traversal (CVE-2019-3943)
MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read and write files...
MikroTik RouterOs Out-of-bounds Write (CVE-2020-20245)
Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the log process. An authenticated remote attacker can cause a Denial of Service due to improper memory access. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for mor...
MikroTik RouterOs NULL Pointer Dereference (CVE-2021-36613)
Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for...
MikroTik RouterOS Missing Authentication for Critical Function (CVE-2019-3978)
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning...
MikroTik RouterOs NULL Pointer Dereference (CVE-2020-20222)
Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference. This plugin only works with Tenable.ot. Please visit...
MikroTik RouterOS Uncontrolled Resource Consumption (CVE-2018-5951)
An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP Protocol 97 will cause RouterOS to reboot imminently. All versions of RouterOS that supports EoIPv6 are vulnerable to this attack. This plugin only...
MikroTik RouterOs Out-of-bounds Write (CVE-2020-20218)
Mikrotik RouterOs 6.44.6 long-term tree suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable. This plugin only works with Tenable.ot. Please visit...
MikroTik RouterOS Improper Privilege Management (CVE-2023-30799)
MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super- admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrar...
MikroTik RouterOS Improper Access Control (CVE-2021-27221)
MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor's position is that this is intended behavior because of how user policies work This plugin only works with Tenable.ot. Please visit...
MikroTik RouterOS Out-of-bounds Write (CVE-2018-1156)
Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface. This vulnerability could theoretically allow a remote authenticated attacker execute arbitrary code on the system. This plugin only works with Tenable.ot. Please visit...
MikroTik RouterOs Out-of-bounds Write (CVE-2020-20231)
Mikrotik RouterOs through stable version 6.48.3 suffers from a memory corruption vulnerability in the /nova/bin/detnet process. An authenticated remote attacker can cause a Denial of Service NULL pointer dereference. This plugin only works with Tenable.ot. Please visit...
MikroTik RouterOS Uncontrolled Resource Consumption (CVE-2017-8338)
A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on port 500 used for L2TP over IPsec, preventing the affected router from accepting new connections; all devices will be disconnected from the router a...
MikroTik RouterOS Out-of-bounds Write (CVE-2020-20247)
Mikrotik RouterOs before 6.46.5 stable tree suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due via the loop counter variable. This plugin only works with Tenable.ot. Please visit...
MikroTik RouterOS Out-of-bounds Write (CVE-2021-41987)
In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution. The attacker must know the scepservername value. This affects RouterOS 6.46.8, 6.47.9, and 6.47.10. This plugin only works with Tenable.ot. Please...
MikroTik RouterOS Integer Underflow (CVE-2019-16160)
An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc...
MikroTik RouterOS Confused Deputy (CVE-2019-3924)
MikroTik RouterOS before 6.43.12 stable and 6.42.12 long-term is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. A remote unauthenticated attacker can use this vulnerability to bypass the router's firewall or for...
RouterOS-SMB-DOS-POC
CVE-2024-27686: RouterOS-SMB-DOS-POC Update As of 3/4/24 Mit...
The vulnerability of the application software interface of the RouterOS operating system for MikroTik routers allows a hacker to disclose protected information.
The vulnerability of the application software interface of the RouterOS operating system for MikroTik routers is related to deficiencies in access control. Exploiting this vulnerability can allow a malicious actor to disclose sensitive information...
MikroTik RouterOS 7.1 < 7.12 Access Control Vulnerability
MikroTik RouterOS is prone to an access control vulnerability in the REST API. SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...
