Vulnerability identifier: #VU12140

Vulnerability risk: Critical

CVSSv3.1: 9.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2018-14847

CWE-ID: CWE-287

Exploitation vector: Network

Exploits in database: 9

• October 31, 2022
  • routeros-CVE-2018-14847-bytheway (By the Way is an exploit that enables a root shell on Mikrotik devices running RouterOS versions:) [Github]
• June 17, 2021
  • Mikrotik WinBox 6.42 - Credential Disclosure (golang) [Exploit-DB]
  • MicroTik RouterOS < 6.43rc3 - Remote Root [Exploit-DB]
• November 5, 2020
  • Mikrotik Winbox Arbitrary File Read [Metasploit]
• July 15, 2020
  • mikrotik-beast ( Mass MikroTik WinBox Exploitation tool, CVE-2018-14847 ) [Github]
• March 18, 2020
  • WinboxExploit (C# implementation of BasuCert/WinboxPoC [Winbox Critical Vulnerability (CVE-2018-14847)]) [Github]
  • MikroRoot (Automated version of CVE-2018-14847 (MikroTik Exploit)) [Github]
  • mikrotik-beast ( Mass MikroTik WinBox Exploitation tool, CVE-2018-14847 ) [Github]
  • Python-MikrotikLoginExploit (PoC of CVE-2018-14847 Mikrotik Vulnerability using simple script) [Github]

Impact: Code execution

Vulnerable software:
MikroTik RouterOS
Hardware solutions / Routers & switches, VoIP, GSM, etc

Vendor: MikroTik