CVE-2023-30799

—

CVSS 3.1

7.2 high

EPSS

1%p70

Published

Jul 19, 2023 (Jul 19, 2023)

Modified

Jun 17, 2026

Description

MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.

Vendors: mikrotik
Products: routeros
Weakness: CWE-269
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.4%)

In the news8 stories

13,000 MikroTik Routers Hijacked by Botnet for Malspam and Cyberattacks

The Hacker NewsJan 21, 12:46 UTC · Jan 21, 2025Malware in the wildCVE-2023-30799

Week in review: Ivanti zero-day exploited, MikroTik vulnerability could compromise 900,000 routers

Help Net SecurityAug 13, 19:33 UTC · Aug 13, 2023Exploit / PoC CVE-2023-30799 CVE-2023-35078 CVE-2023-38606

Security Affairs newsletter Round 430 by Pierluigi Paganini

Security AffairsAug 6, 08:03 UTC · Aug 6, 2023Ransomware in the wildCVE-2023-38750 CVE-2023-38606 CVE-2023-38408+1 CVEs

Critical MikroTik RouterOS Vulnerability Exposes Over Half a Million Devices to Hacking

The Hacker NewsJul 27, 06:34 UTC · Jul 27, 2023Vulnerability CVE-2023-30799

Researchers say more than 900,000 MikroTik routers vulnerable to hackers

The RecordJul 26, 17:47 UTC · Jul 26, 2023Exploit / PoC CVE-2023-30799

Over 900,000 MikroTik Routers Exposed to Critical Bug

Infosecurity MagazineJul 26, 10:00 UTC · Jul 26, 2023Vulnerability CVE-2023-30799

Over 500K MikroTik RouterOS systems potentially exposed to hacking due to critical flaw

Security AffairsJul 26, 09:13 UTC · Jul 26, 2023Exploit / PoC CVE-2023-30799

MikroTik vulnerability could be used to hijack 900,000 routers (CVE-2023-30799)

Help Net SecurityJul 26, 00:00 UTC · Jul 26, 2023Vulnerability CVE-2023-30799