CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2018-08-02
MikroTik RouterOS WinBox Directory Traversal Arbitrary File Read/Write Vulnerability (CVE-2018-14847) Analysis and Mitigation Guide
[Affected Scope] MikroTik RouterOS versions 6.29 through 6.42 with the WinBox interface enabled
[Impact] Unauthenticated remote attackers can read arbitrary system files (including user credentials), and authenticated attackers can write arbitrary files, leading to complete device compromise
[Mitigation] Immediately upgrade RouterOS to patched versions (6.40.9, 6.42.1 or higher) and restrict or disable external WinBox port (8291) access