Exploit / PoCcriticalExploited in the wild

Expert presented a new attack technique to compromise MikroTik Routers

Security Affairsby @securityaffairsOct 8, 2018 · 12:28 UTC (Oct 8, 2018)2 min read6 · 1 read

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2018-14847 CVE-2018-1156 CVE-2018-1157 CVE-2018-1159 CVE-2018-1158

Tags: cve-2018-14847 cve-2018-1156 cve-2018-1157 cve-2018-1159 cve-2018-1158 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2018-1156 +3 related CVEs CVE-2018-1157 CVE-2018-1158 CVE-2018-1159	Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface	8.8 group max	7%	PoC	Aug 23, 2018
CVE-2018-14847	Directory Traversal in MikroTik RouterOS Winbox Interface (Unauthenticated File Read)	9.1	96%	KEVPoC ×7	Aug 2, 2018 KEV Dec 1, 2021

From the original article

2 min read at securityaffairs.com

Experts from Tenable Research have devised a new attack technique to fully compromise MikroTik Routers. MikroTik routers continue to be under attack, and the situation is getting worse because of the availability of a new PoC code. The new attack technique discovered by experts at Tenable Research could be exploited by remote attackers to execute arbitrary code on the vulnerable devices.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.