CVE-2022-34960

PoC —

CVSS 3.1

9.8 critical

EPSS

1%p72

Published

Aug 25, 2022 (Aug 25, 2022)

Modified

Jun 17, 2026

Description

The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host.

Vendors: mikrotik
Products: routeros
Weakness: CWE-59
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.5%)

In the news0 stories

No ingested article mentions this CVE yet.