Mikrotik

Routeros

91 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
7.2

CVE-2025-6443

  • EPSS 0.47%
  • Veröffentlicht 25.06.2025 21:29:22
  • Zuletzt bearbeitet 18.08.2025 15:45:13

Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability. This vulnerability allows remote attackers to bypass access restrictions on affected installations of Mikrotik RouterOS. Authentication is not required to exploit this vulnerabi...

7.5

CVE-2024-54952

  • EPSS 0.51%
  • Veröffentlicht 29.05.2025 00:00:00
  • Zuletzt bearbeitet 30.06.2025 14:46:38

MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote, unauthenticated attackers can exploit this issue by sending specially crafted packets, triggering a null pointer dereference. This leads to a Remote Denial ...

5.4

CVE-2024-54772

Exploit
  • EPSS 0.78%
  • Veröffentlicht 11.02.2025 23:15:09
  • Zuletzt bearbeitet 30.06.2025 14:48:12

An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18. A discrepancy in response size between connection at...

7.5

CVE-2023-32154

  • EPSS 0.61%
  • Veröffentlicht 03.05.2024 02:15:20
  • Zuletzt bearbeitet 30.06.2025 17:01:03

Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Mikrotik RouterOS. Authentication is not required to exploit ...

5.3

CVE-2023-41570

Exploit
  • EPSS 0.47%
  • Veröffentlicht 14.11.2023 23:15:09
  • Zuletzt bearbeitet 21.11.2024 08:21:18

MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API.

7.5

CVE-2023-30800

Exploit
  • EPSS 1.7%
  • Veröffentlicht 07.09.2023 16:15:07
  • Zuletzt bearbeitet 21.11.2025 17:15:49

The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and...

7.2

CVE-2023-30799

  • EPSS 1.3%
  • Veröffentlicht 19.07.2023 15:15:10
  • Zuletzt bearbeitet 21.11.2025 17:15:49

MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker ca...

7.5

CVE-2020-20021

Exploit
  • EPSS 1.01%
  • Veröffentlicht 12.07.2023 13:15:09
  • Zuletzt bearbeitet 09.07.2026 00:16:52

An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemon.

7.5

CVE-2023-24094

Exploit
  • EPSS 0.82%
  • Veröffentlicht 27.03.2023 14:15:07
  • Zuletzt bearbeitet 09.07.2026 01:18:04

An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service (DoS) via crafted packets.

9.8

CVE-2022-45315

Exploit
  • EPSS 1.26%
  • Veröffentlicht 05.12.2022 16:15:10
  • Zuletzt bearbeitet 09.04.2026 21:16:04

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated attackers to execute arbitrary code via a crafted packet.