Vulnerabilityhigh

MikroTik routers with default credentials can be easily compromised

Help Net Securityby @zeljkazorzOct 8, 2018 · 00:00 UTC (Oct 8, 2018)3 min read8

Read at helpnetsecurity.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-1156 CVE-2018-1157 CVE-2018-1158 CVE-2018-1159 CVE-2018-14847

Tags: cve-2018-1156 cve-2018-1157 cve-2018-1158 cve-2018-1159 cve-2018-14847 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-1156 +3 related CVEs CVE-2018-1157 CVE-2018-1158 CVE-2018-1159	Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface	8.8 group max	7%	PoC	Aug 23, 2018
CVE-2018-14847	Directory Traversal in MikroTik RouterOS Winbox Interface (Unauthenticated File Read)	9.1	96%	KEVPoC ×7	Aug 2, 2018 KEV Dec 1, 2021

From the original article

3 min read at helpnetsecurity.com

If you own a MikroTik router and you haven’t updated its RouterOS in the last month, you should do so now: Tenable Research has released details about four vulnerabilities they found in the OS, including an authenticated remote code execution flaw that can be leveraged against routers with default credentials.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.