MikroTik RouterOS 7.24.5 WebFig Session Token Replay Authentication Bypass

MikroTik RouterOS ipt_SAME.ko same_check integer overflow

MikroTik RouterOS WinBox split-principal authentication bypass allows privilege escalation

MikroTik RouterOS Integer Underflow

MikroTik RouterOS < 7.25beta4 Improper Input Validation DoS via BGP Labelled-VPN NLRI

MikroTik RouterOS < 7.24 Heap Corruption via SMB1 SessionSetupAndX

MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX

MikroTik RouterOS Path Traversal via Container OCI/tar Image Extraction

MikroTik RouterOS Stack Buffer Overflow via TFTP URL Path Leading to Privilege Escalation

SSH session privilege manipulation via a crafted username in Mikrotik RouterOS

Unauthenticated file read in Mikrotik RouterOS

SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS

TLS server impersonation possible in Mikrotik RouterOS

Kernel memory disclosure and denial of service in MikroTik RouterOS btest service

SSH user impersonation possible in Mikrotik RouterOS

Insufficient session expiration in MikroTik RouterOS

Improper restriction of excessive authentication attempts in MikroTik RouterOS and Cloud Hosted Router

Improper certificate validation in multiple RouterOS services

MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds

MikroTik RouterOS libjson.so print parse_json_element buffer overflow

Cross-site scripting via dst parameter in RouterOS WiFi hotspot

Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability

Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability

Implementations of UDP application protocols are susceptible to network loops and denial of service

MikroTik RouterOS Web Interface Heap Corruption

MikroTik RouterOS Administrator Privilege Escalation

MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed password.

MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An aut…