MikroTik RouterOS Path Traversal (CVE-2019-15055)

MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbitrary files. Attackers can exploit this vulnerability to reset credential storage, which allows them access to the management interface as an administrator...

CVE-2019-15055

Summary (CVE-2019-15055) MikroTik RouterOS versions up to 6.44.5 and 6.45.x up to 6.45.3 are affected by a vulnerability where improper handling of the disk name allows an authenticated user to delete arbitrary files. This can lead to a reset of credential storage, which may enable the attacker t...