ID:5866 - Exploit for Incorrect permission assignment for critical resource in MikroTik RouterOS - CVE-2019-3978

Link to public exploit:

Vulnerability description

The vulnerability allows a remote attacker to perform DNS cache poisoning attacks.

The vulnerability exists due to RouterOS allows a remote attacker to initiate DNS queries via port 8291/TCP. A remote attacker can force the router to send DNS requests to an attacker-contorted server and poison router's DNS cache.

Remediation