Vulnerabilitycritical

New Exploit for MikroTik Router WinBox Vulnerability Gives Full Root Access

The Hacker Newsby @TheHackersNewsOct 8, 2018 · 15:34 UTC (Oct 8, 2018)2 min read7 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-14847 CVE-2018-1156 CVE-2018-1157 CVE-2018-1159 CVE-2018-1158

Tags: cve-2018-14847 cve-2018-1156 cve-2018-1157 cve-2018-1159 cve-2018-1158 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-1156 +3 related CVEs CVE-2018-1157 CVE-2018-1158 CVE-2018-1159	Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface	8.8 group max	7%	PoC	Aug 23, 2018
CVE-2018-14847	Directory Traversal in MikroTik RouterOS Winbox Interface (Unauthenticated File Read)	9.1	96%	KEVPoC ×7	Aug 2, 2018 KEV Dec 1, 2021

From the original article

2 min read at thehackernews.com

A known vulnerability in MikroTik routers is potentially far more dangerous than previously thought. A cybersecurity researcher from Tenable Research has released a new proof-of-concept (PoC) RCE attack for an old directory traversal vulnerability that was found and patched within a day of its discovery in April this year.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.