Vulnerabilities in Mikrotik RouterOS software
ID: f3b5a8ce-a5f6-5950-91ca-86d278ce830f
STIX ID: report--f3b5a8ce-a5f6-5950-91ca-86d278ce830f
Feed Name: CERT Polska
CERT.PL published a coordinated disclosure of multiple serious vulnerabilities in MikroTik RouterOS (six CVEs) that affect many 6.x and 7.x releases. The issues include SSH authentication bypasses (incomplete RSA key checks and rekey authentication bypass), acceptance of malformed RSA signatures enabling TLS impersonation, unauthenticated file-read allowing disclosure of root-owned files, argument-handling flaws leading to privilege escalation, and a kernel crash via packet handling; fixes are available in RouterOS 6.49.21, 7.23.4 and 7.24.2.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.