CVE-2018-1159-A www memory corruption flaw that could crash the HTTP server by rapidly authenticating and disconnecting.

CVE-2018-1157-A file upload memory exhaustion flaw that allows an authenticated remote attacker to crash the HTTP server.

CVE-2018-1156-A stack buffer overflow flaw that could allow an authenticated remote code execution, allowing attackers to gain full system access and access to any internal system that uses the router.The technique is yet another security blow against MikroTik routers, which was previously targeted by the VPNFilter malware and used in an extensive cryptojacking campaign uncovered a few months ago.īesides this, Tenable Research also disclosed additional MikroTik RouterOS vulnerabilities, including: In other words, the new exploit could allow unauthorized attackers to hack MikroTik's RouterOS system, deploy malware payloads or bypass router firewall protections. However, the new attack method found by Tenable Research exploits the same vulnerability and takes it to one step ahead.Ī PoC exploit, called ' By the Way,' released by Tenable Research Jacob Baines, first uses directory traversal vulnerability to steal administrator login credentials from user database file and the then writes another file on the system to gain root shell access remotely. New Hack Turned 'Medium' MikroTik Vulnerability Into 'Critical' The vulnerability allows 'remote attackers to bypass authentication and read arbitrary files by modifying a request to change one byte related to a Session ID.' The vulnerability impacts Winbox-a management component for administrators to set up their routers using a Web-based interface-and a Windows GUI application for the RouterOS software used by the MikroTik devices.

Routeros change software id