MikroTik RouterOS Cross-site Scripting (CVE-2021-3014)

In MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS via the target parameter. This plugin only works with Tenable.ot. Please visit https://www.tenable.com/products/tenable-ot for more information. %NASLMINLEVEL 80900 C Tenable, Inc. include'compat.inc'; ...

CVE-2021-3014

In MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS via the target parameter...

CVE-2021-3014

CVE-2021-3014 affects MikroTik RouterOS (through 2021-01-04) with a reflected XSS vulnerability in the hotspot login page, exploitable via the target parameter. The affected component is the hotspot login page; the underlying issue is reflected XSS. Publicly available references in the connected ...