Known vulnerabilities in MikroTik RouterOS - page 2

Vendor: MikroTik
Software CPE: cpe:2.3:h:mikrotik:mikrotik_routeros:*:*:*:*:*:*:*:*
Total vulnerabilities: 51
Public exploits: 6
Known exploited (KEV): 3
Highest CVSSv4 Score: 9.3

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting MikroTik RouterOS MikroTik RouterOS is affected by 51 known vulnerabilities: 3 critical, 7 high, 21 medium, 20 low Critical High Medium Low

Vulnerabilities (51)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU27708 - Memory corruption
CWE-119 Low
No
No
6.46.5 12.05.2020 SB2020051213
#VU26233 - Resource exhaustion
CWE-400 Medium
Available
No
6.44.4 19.03.2020 SB2020031925
#VU24728 - Improper Authentication
CWE-287 Low
No
No
6.45.8, 6.46.2 29.01.2020 SB2020012912
#VU24071 - Reachable Assertion
CWE-617 Low
No
No
6.44.6 08.01.2020 SB2019082811
#VU24070 - NULL Pointer Dereference
CWE-476 Low
No
No
6.44.6 08.01.2020 SB2019082811
#VU22427 - Improper input validation
CVE-2019-3979
CWE-20 High
No
No
6.44.6, 6.45.7 30.10.2019 SB2019103004
#VU22426 - Incorrect Permission Assignment for Critical Resource
CVE-2019-3978
CWE-732 Medium
Available
No
6.44.6, 6.45.7 30.10.2019 SB2019103004
#VU22425 - Insufficient Verification of Data Authenticity
CVE-2019-3977
CWE-345 Low
No
No
6.44.6, 6.45.7 30.10.2019 SB2019103004
#VU22424 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2019-3976
CWE-22 Medium
No
No
6.44.6, 6.45.7 30.10.2019 SB2019103004
#VU20428 - Improper input validation
CVE-2019-15055
CWE-20 Low
No
No
6.44.6 28.08.2019 SB2019082811
#VU18951 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CVE-2018-10066
CWE-300 Low
No
No
6.45.1, 6.44.4 01.07.2019 SB2019070105
#VU18950 - Resource Management Errors
CVE-2014-8160
CWE-399 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019070105
#VU18949 - Permissions, Privileges, and Access Controls
CVE-2019-13074
CWE-264 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019070105
#VU18947 - Resource exhaustion
CVE-2019-11479
CWE-400 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019061702
SB2019070105
SB2019061811
and 48 more
#VU18946 - Resource exhaustion
CVE-2019-11478
CWE-400 Medium
No
No
6.44.4, 6.45.1 01.07.2019 SB2019061702
SB2019070105
SB2019061811
and 49 more
#VU18813 - Integer overflow
CVE-2019-11477
CWE-190 Medium
No
No
6.44.4, 6.45.1 17.06.2019 SB2019061702
SB2019070105
SB2019061811
and 53 more
#VU17851 - Improper input validation
CVE-2019-3924
CWE-20 Medium
Available
No
6.42.12, 6.43.12 25.02.2019 SB2019022501
#VU17371 - Memory corruption
CWE-119 High
No
No
6.43.11 05.02.2019 SB2019020501
#VU14743 - Channel Accessible by Non-Endpoint ('Man-in-the-Middle')
CWE-300 Low
No
No
6.43 11.09.2018 SB2018091103
#VU14528 - Memory corruption
CVE-2018-1159
CWE-119 Low
No
No
6.40.9, 6.42.7 25.08.2018 SB2018082501


Showing elements 21 - 40 out of 51