CVE-2019-3924
PoC ×2—CVSS 3.1
7.5 high
EPSS
16%p97
Published
()
Modified
Description
MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. A remote unauthenticated attacker can use this vulnerability to bypass the router's firewall or for general network scanning activities.
- Vendors
- mikrotik
- Products
- routeros
- Weakness
- CWE-441
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
In the news0 stories
No ingested article mentions this CVE yet.