CVE Vulnerability Advisory Database

[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to security patches.

[Impact] Unauthenticated remote attackers can manipulate the trusted policy mask via specially crafted SSH usernames, leading to full privilege escalation.

[Mitigation] Immediately upgrade to versions 6.49.21, 7.23.4, or 7.24.2 and restrict SSH access to trusted source IPs.

[Affected Scope] MikroTik RouterOS versions 6.x and 7.x prior to specific security releases.

[Impact] Unauthenticated attackers can create, overwrite, or reconstruct files within the RouterOS namespace via SSH, leading to configuration theft or system compromise.

[Mitigation] Upgrade to versions 6.49.21, 7.23.4, 7.24.2 or later, and restrict SSH access.

[Affected Scope] Erlang/OTP versions prior to OTP-27.3.3, OTP-26.2.5.11, and OTP-25.3.2.20

[Impact] Unauthenticated remote attackers can exploit a flaw in SSH protocol message handling to execute arbitrary commands and gain full system control without valid credentials

[Mitigation] Immediately upgrade Erlang/OTP to patched versions (OTP-27.3.3, OTP-26.2.5.11, or OTP-25.3.2.20) or temporarily disable the SSH server and restrict access via firewall rules

[Affected Scope] Juniper ScreenOS versions 6.2.0r15 through 6.2.0r18 and 6.3.0r12 through 6.3.0r20

[Impact] Remote attackers can bypass authentication and gain full administrative (root) access to the firewall via SSH or TELNET using a hardcoded master password

[Mitigation] Immediately upgrade ScreenOS to patched versions (6.3.0r21 or the respective 'b' releases) and disable external SSH/TELNET access