Known vulnerabilities in MikroTik RouterOS 6.41.2

Vendor: MikroTik
Version: 6.41.2
Software CPE: cpe:2.3:h:mikrotik:mikrotik_routeros:*:*:*:*:*:*:*:*
Total vulnerabilities: 17
Public exploits: 1
Known exploited (KEV): 2
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting MikroTik RouterOS version 6.41.2 MikroTik RouterOS 6.41.2 is affected by 17 vulnerabilities: 1 critical, 1 high, 8 medium, 7 low Critical High Medium Low

Vulnerabilities (17)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78701 - Permissions, Privileges, and Access Controls
CVE-2023-30799
CWE-264 Low
No
No
6.48.7, 6.49.8 27.07.2023 SB2023072712
#VU76283 - Out-of-bounds write
CVE-2023-32154
CWE-787 High
No
No
7.9.1 18.05.2023 SB2023051812
#VU52988 - NULL Pointer Dereference
CVE-2020-20222
CWE-476 Low
No
No
6.48.3 10.05.2021 SB2021051005
#VU52987 - Reachable Assertion
CVE-2020-20214
CWE-617 Low
No
No
6.48.3 10.05.2021 SB2021051005
#VU22424 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-3976
CWE-22 Medium
No
No
6.44.6, 6.45.7 30.10.2019 SB2019103004
#VU18951 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-10066
CWE-300 Low
No
No
6.45.1, 6.44.4 01.07.2019 SB2019070105
#VU18950 - Resource Management Errors
CVE-2014-8160
CWE-399 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019070105
#VU18949 - Permissions, Privileges, and Access Controls
CVE-2019-13074
CWE-264 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019070105
#VU18947 - Resource exhaustion
CVE-2019-11479
CWE-400 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019061702
SB2019070105
SB2019061811
and 48 more
#VU18946 - Resource exhaustion
CVE-2019-11478
CWE-400 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019061702
SB2019070105
SB2019061811
and 49 more
#VU18813 - Integer overflow
CVE-2019-11477
CWE-190 Medium
No
No
6.44.4, 6.45.1 17.06.2019 SB2019061702
SB2019070105
SB2019061811
and 53 more
#VU14528 - Memory corruption
CVE-2018-1159
CWE-119 Low
No
No
6.40.9, 6.42.7 25.08.2018 SB2018082501
#VU14526 - Resource Management Errors
CVE-2018-1158
CWE-399 Low
No
No
6.40.9, 6.42.7 25.08.2018 SB2018082501
#VU14525 - Resource Management Errors
CVE-2018-1157
CWE-399 Medium
No
No
6.40.9, 6.42.7 25.08.2018 SB2018082501
#VU14521 - Stack-based buffer overflow
CVE-2018-1156
CWE-121 Low
No
No
6.40.9, 6.42.7 25.08.2018 SB2018082501
#VU12140 - Improper Authentication
CVE-2018-14847
CWE-287 Critical
Public exploit available
Exploited
- 24.04.2018 SB2018042420
#VU11142 - Stack-based buffer overflow
CVE-2018-7445
CWE-121 Medium
No
Exploited
- 16.03.2018 SB2018031609