Known vulnerabilities in MikroTik RouterOS 6.43.2

Vendor: MikroTik
Version: 6.43.2
Software CPE: cpe:2.3:h:mikrotik:mikrotik_routeros:*:*:*:*:*:*:*:*
Total vulnerabilities: 14
Public exploits: 2
Known exploited (KEV): 0
Highest CVSSv4 Score: 9.3

Vulnerabilities by Severity

Severity distribution of vulnerabilities affecting MikroTik RouterOS version 6.43.2 MikroTik RouterOS 6.43.2 is affected by 14 vulnerabilities: 2 high, 8 medium, 4 low Critical High Medium Low

Vulnerabilities (14)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78701 - Permissions, Privileges, and Access Controls
CVE-2023-30799
CWE-264 Low
No
No
6.48.7, 6.49.8 27.07.2023 SB2023072712
#VU76283 - Out-of-bounds write
CVE-2023-32154
CWE-787 High
No
No
7.9.1 18.05.2023 SB2023051812
#VU52988 - NULL Pointer Dereference
CVE-2020-20222
CWE-476 Low
No
No
6.48.3 10.05.2021 SB2021051005
#VU52987 - Reachable Assertion
CVE-2020-20214
CWE-617 Low
No
No
6.48.3 10.05.2021 SB2021051005
#VU46736 - Improper Validation of Array Index
CVE-2020-11881
CWE-129 Medium
Public exploit available
No
6.47.4 14.09.2020 SB2020091516
#VU22424 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-3976
CWE-22 Medium
No
No
6.44.6, 6.45.7 30.10.2019 SB2019103004
#VU18951 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-10066
CWE-300 Low
No
No
6.45.1, 6.44.4 01.07.2019 SB2019070105
#VU18950 - Resource Management Errors
CVE-2014-8160
CWE-399 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019070105
#VU18949 - Permissions, Privileges, and Access Controls
CVE-2019-13074
CWE-264 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019070105
#VU18947 - Resource exhaustion
CVE-2019-11479
CWE-400 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019061702
SB2019070105
SB2019061811
and 48 more
#VU18946 - Resource exhaustion
CVE-2019-11478
CWE-400 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019061702
SB2019070105
SB2019061811
and 49 more
#VU18813 - Integer overflow
CVE-2019-11477
CWE-190 Medium
No
No
6.44.4, 6.45.1 17.06.2019 SB2019061702
SB2019070105
SB2019061811
and 53 more
#VU17851 - Improper input validation
CVE-2019-3924
CWE-20 Medium
Public exploit available
No
6.42.12, 6.43.12 25.02.2019 SB2019022501
#VU17371 - Memory corruption
CWE-119 High
No
No
6.43.11 05.02.2019 SB2019020501