Browse CVEs

HIGH 7.5 CVE-2024-54952 MikroTik RouterOS 6.40.5, the SMB service contains a memory corruption vulnerability. Remote, unauthenticated attackers can exploit this issue by sen… Routeros Mitigation only Fix from $1,9502025-05-29 HIGH 7.5 CVE-2023-24094 An issue in the bridge2 component of MikroTik RouterOS v6.40.5 allows attackers to cause a Denial of Service (DoS) via crafted packets. Routeros No fix yet Fix from $1,9502023-03-27 CRITICAL 9.8 CVE-2022-34960 The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations … Routeros No fix yet Fix from $2,3002022-08-25 HIGH 8.1 CVE-2021-41987EPSS 16% In the SCEP Server of RouterOS in certain Mikrotik products, an attacker can trigger a heap-based buffer overflow that leads to remote code execution… Routeros No fix yet Fix from $1,9502022-03-16 HIGH 7.5 CVE-2020-22844 A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted SMB requests. Routeros Mitigation only Fix from $1,9502022-02-28 HIGH 7.5 CVE-2020-22845 A buffer overflow in Mikrotik RouterOS 6.47 allows unauthenticated attackers to cause a denial of service (DOS) via crafted FTP requests. Routeros Mitigation only Fix from $1,9502022-02-28 MEDIUM 6.5 CVE-2020-20219 Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/igmp-proxy process. An authenticated remote… Routeros No fix yet Fix from $1,6002021-07-21 MEDIUM 6.5 CVE-2020-20248 Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the memtest process. An authenticated remote attacker can c… Routeros No fix yet Fix from $1,6002021-07-19 MEDIUM 6.5 CVE-2020-20211 Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an assertion failure vulnerability in the /nova/bin/console process. An authenticated remote a… Routeros No fix yet Fix from $1,6002021-07-07 MEDIUM 6.5 CVE-2020-20212 Mikrotik RouterOs 6.44.5 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/console process. An authenticated remote at… Routeros No fix yet Fix from $1,6002021-07-07 MEDIUM 6.5 CVE-2020-20213 Mikrotik RouterOs 6.44.5 (long-term tree) suffers from an stack exhaustion vulnerability in the /nova/bin/net process. An authenticated remote attack… Routeros Mitigation only Fix from $1,6002021-07-07 MEDIUM 6.5 CVE-2020-20215 Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote atta… Routeros Mitigation only Fix from $1,6002021-07-07 MEDIUM 6.5 CVE-2020-20216 Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/graphing process. An authenticated remote a… Routeros Mitigation only Fix from $1,6002021-07-07 MEDIUM 6.5 CVE-2020-20227 Mikrotik RouterOs stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/diskd process. An authenticated remote attacker can cau… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20245 Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the log process. An authenticated remote attacker can cause a Denia… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20246 Mikrotik RouterOs stable 6.46.3 suffers from a memory corruption vulnerability in the mactel process. An authenticated remote attacker can cause a De… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20214 Mikrotik RouterOs 6.44.6 (long-term tree) suffers from an assertion failure vulnerability in the btest process. An authenticated remote attacker can … Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20222 Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote at… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20236 Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attac… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20237 Mikrotik RouterOs 6.46.3 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/sniffer process. An authenticated remote attac… Routeros No fix yet Fix from $1,6002021-05-18 MEDIUM 6.5 CVE-2020-20218 Mikrotik RouterOs 6.44.6 (long-term tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote… Routeros No fix yet Fix from $1,6002021-05-03 HIGH 8.1 CVE-2021-27221 MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor'… Routeros No fix yet Fix from $1,9502021-03-19 HIGH 7.5 CVE-2018-5951 An issue was discovered in Mikrotik RouterOS. Crafting a packet that has a size of 1 byte and sending it to an IPv6 address of a RouterOS box with IP… Routeros No fix yet Fix from $1,9502020-03-02 HIGH 7.5 CVE-2018-10070EPSS 13% A vulnerability in MikroTik Version 6.41.4 could allow an unauthenticated remote attacker to exhaust all available CPU and all available RAM by sendi… Router Firmware No fix yet Fix from $1,9502018-04-16 HIGH 8.1 CVE-2018-10066 An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable… Routeros No fix yet Fix from $1,9502018-04-13 HIGH 7.5 CVE-2017-17537 MikroTik RouterBOARD v6.39.2 and v6.40.5 allows an unauthenticated remote attacker to cause a denial of service by connecting to TCP port 53 and send… Routerboard No fix yet Fix from $1,9502017-12-13 HIGH 7.5 CVE-2017-17538EPSS 8% MikroTik v6.40.5 devices allow remote attackers to cause a denial of service via a flood of ICMP packets. Router Firmware No fix yet Fix from $1,9502017-12-13 HIGH 7.5 CVE-2017-8338 A vulnerability in MikroTik Version 6.38.5 could allow an unauthenticated remote attacker to exhaust all available CPU via a flood of UDP packets on … Routeros No fix yet Fix from $1,9502017-05-18 HIGH 7.5 CVE-2017-7285EPSS 19% A vulnerability in the network stack of MikroTik Version 6.38.5 released 2017-03-09 could allow an unauthenticated remote attacker to exhaust all ava… Routeros No fix yet Fix from $1,9502017-03-29 HIGH 7.5 CVE-2017-6444EPSS 13% The MikroTik Router hAP Lite 6.25 has no protection mechanism for unsolicited TCP ACK packets in the case of a fast network connection, which allows … Routeros No fix yet Fix from $1,9502017-03-12