mikrotik Vulnerability Advisory Catalog

Total 87 security vulnerabilities recorded for mikrotik software and firmware.

← Back to All Vendors
CVE-2018-1157 MEDIUM
Component: routeros

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to a memory exhaustion vulnerability. An authenticated remote attacker can crash the HTTP ser...

📅 2018-08-23
CVSS 6.5 Dossier →
Component: routeros

Mikrotik RouterOS before 6.42.7 and 6.40.9 is vulnerable to stack buffer overflow through the license upgrade interface. This vulnerability could theo...

📅 2018-08-23
CVSS 8.8 Dossier →
CVE-2018-14847 CRITICAL
Component: routeros

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary f...

📅 2018-08-02
CVSS 9.1 Dossier →
Component: router_firmware

A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sendin...

📅 2018-04-16
CVSS 7.5 Dossier →
Component: routeros

An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable ...

📅 2018-04-13
CVSS 8.1 Dossier →
CVE-2018-7445 CRITICAL
Component: routeros

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the...

📅 2018-03-19
CVSS 9.8 Dossier →
Component: routerboard

MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by connecting to TCP port 53 and sendi...

📅 2017-12-13
CVSS 7.5 Dossier →
Component: router_firmware

MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets....

📅 2017-12-13
CVSS 7.5 Dossier →
Component: routeros

A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on p...

📅 2017-05-18
CVSS 7.5 Dossier →
Component: routeros

A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all avai...

📅 2017-03-29
CVSS 7.5 Dossier →
Component: routeros

The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows r...

📅 2017-03-12
CVSS 7.5 Dossier →
CVE-2017-6297 MEDIUM
Component: routeros

The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attack...

📅 2017-02-27
CVSS 5.9 Dossier →
CVE-2015-2350 UNKNOWN
Component: routeros

Cross-site request forgery (CSRF) vulnerability in MikroTik RouterOS 5.0 and earlier allows remote attackers to hijack the authentication of administr...

📅 2015-03-19
CVSS 6.8 Dossier →
CVE-2012-6050 UNKNOWN
Component: routeros

The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router versi...

📅 2012-11-27
CVSS 6.4 Dossier →
CVE-2008-6976 UNKNOWN
Component: routeros

MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (NMS) settings via a crafted SNM...

📅 2009-08-19
CVSS 6.4 Dossier →
Page 4 of 4 (87 Total Records)