Mikrotik RouterOS contains an improper enforcement of behavioral workflow vulnerability that could allow an unauthenticated client to open a session channel and send an exec request. This …
Posts tagged: MikroTik
MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability
A crafted username at the RouterOS SSH prompt lets an unauthenticated attacker rewrite the router’s permission mask and take full control, with no credentials needed.
MikroTik RouterOS Missing Authentication for Critical Function Vulnerability
MikroTik’s bandwidth-test service accepts a related connection before login finishes, letting an unauthenticated network client leak kernel memory or crash the router’s kernel.