Known vulnerabilities in MikroTik RouterOS

Vendor: MikroTik
Software CPE: cpe:2.3:h:mikrotik:mikrotik_routeros:*:*:*:*:*:*:*:*
Total vulnerabilities: 53
Public exploits: 9
Known exploited (KEV): 7

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MikroTik RouterOS MikroTik RouterOS is affected by 53 known vulnerabilities: 4 critical, 7 high, 21 medium, 21 low Critical High Medium Low

Vulnerabilities (53)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU78701 - Permissions, Privileges, and Access Controls
CVE-2023-30799
CWE-264 Low
No
No
6.48.7, 6.49.8 27.07.2023 SB2023072712
#VU76283 - Out-of-bounds write
CVE-2023-32154
CWE-787 High
No
No
7.9.1 18.05.2023 SB2023051812
#VU67510 - Improper input validation
CVE-2022-2663
CWE-20 Medium
No
No
7.6 20.09.2022 SB2022092042
SB2022092046
SB2022092047
and 74 more
#VU64107 - NULL Pointer Dereference
CVE-2021-36614
CWE-476 Medium
No
No
6.48.2 08.06.2022 SB2022060842
#VU64106 - NULL Pointer Dereference
CVE-2021-36613
CWE-476 Medium
No
No
6.48.2 08.06.2022 SB2022060842
#VU56089 - Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
CVE-2021-23040
CWE-89 Medium
No
No
- 25.08.2021 SB2021082513
#VU52990 - Memory corruption
CVE-2020-20237
CWE-119 Low
No
No
6.48.3 10.05.2021 SB2021051005
#VU52989 - Memory corruption
CVE-2020-20236
CWE-119 Low
No
No
6.48.3 10.05.2021 SB2021051005
#VU52988 - NULL Pointer Dereference
CVE-2020-20222
CWE-476 Low
No
No
6.48.3 10.05.2021 SB2021051005
#VU52987 - Reachable Assertion
CVE-2020-20214
CWE-617 Low
No
No
6.48.3 10.05.2021 SB2021051005
#VU50608 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-22979
CWE-79 Medium
No
No
- 11.02.2021 SB2021021105
#VU49335 - Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')
CVE-2021-3014
CWE-79 Low
No
No
6.48.1 04.01.2021 SB2021010716
#VU46736 - Improper Validation of Array Index
CVE-2020-11881
CWE-129 Medium
Available
No
6.47.4 14.09.2020 SB2020091516
#VU27708 - Memory corruption
CWE-119 Low
No
No
6.46.5 12.05.2020 SB2020051213
#VU27707 - Resource exhaustion
CWE-400 Low
No
No
6.45.7, 6.46.4 12.05.2020 SB2020051213
#VU26233 - Resource exhaustion
CWE-400 Medium
Available
No
6.44.4 19.03.2020 SB2020031925
#VU24728 - Improper Authentication
CWE-287 Low
No
No
6.45.8, 6.46.2 29.01.2020 SB2020012912
#VU22426 - Incorrect Permission Assignment for Critical Resource
CVE-2019-3978
CWE-732 Medium
Available
No
6.44.6, 6.45.7 30.10.2019 SB2019103004
#VU22425 - Insufficient Verification of Data Authenticity
CVE-2019-3977
CWE-345 Low
No
No
6.44.6, 6.45.7 30.10.2019 SB2019103004
#VU22424 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-3976
CWE-22 Medium
No
No
6.44.6, 6.45.7 30.10.2019 SB2019103004


Showing elements 1 - 20 out of 53