CVE-2019-3978

CVSS 3.1: 7.5 high
EPSS: 10%p95
Published: Oct 29, 2019 · Oct 29, 2019
Modified: Jun 17, 2026

Analyze CVE-2019-3978 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning

Vendors: mikrotik

Products: routeros

Weakness: CWE-306

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

NVD CVE.org GitHub PoCs EPSS (10.3%)

In the news

1 story

Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs

The Hacker NewsDec 10, 11:53 UTC · Dec 10, 2021VulnerabilityCVE-2018-14847 CVE-2019-3977 CVE-2019-3978+35 · 1 read