Vulnerabilitycritical
Over 300,000 MikroTik Devices Found Vulnerable to Remote Hacking Bugs
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2018-14847 | Directory Traversal in MikroTik RouterOS Winbox Interface (Unauthenticated File Read) | 9.1 | 96% | KEVPoC ×7 | KEV |
| CVE-2018-7445 | Pre-Authentication Stack Buffer Overflow RCE in MikroTik RouterOS SMB | 9.8 | 66% | KEVPoC ×3 | KEV |
CVE-2019-3978+1 related CVE | RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291 | 7.5 | 10% | ||
| CVE-2021-36260 | Unauthenticated Command Injection in Hikvision Device Web Server | 9.8 | 100% | KEVPoC ×3 | KEV |
| CVE-2021-41653 | The PING function on the TP-Link TL-WR840N EU v5 router with firmware through TL-WR840N(EU)_V5_171211 is vulnerable to remote code execution via a crafted… | 9.8 | 76% | PoC |
From the original article
3 min read at thehackernews.com
At least 300,000 IP addresses associated with MikroTik devices have been found vulnerable to multiple remotely exploitable security vulnerabilities that have since been patched by the popular supplier of routers and wireless ISP devices. The most affected devices are located in China, Brazil, Russia, Italy, Indonesia, with the U. S.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.