CVE-2018-14847criticalunder attackCWE-22

CVE-2018-14847

Published · Updated

Follow this CVE+ Monitor RouterOS

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.1epss 96%
from disclosure to weaponsame day
Published on NVDAug 2
1st PoCMar 30
metasploitAug 2
CISA KEV+1217d
Action required by CISAfederal deadline: 2022-06-01

Apply updates per vendor instructions.

In short

MikroTik RouterOS has a flaw that lets attackers bypass file restrictions using directory traversal tricks in the WinBox interface. Anyone can read files without logging in, and logged-in users can write files anywhere on the system.

Technical detail

A directory traversal vulnerability (CWE-22) in MikroTik RouterOS WinBox interface allows unauthenticated remote attackers to read arbitrary files via path manipulation, and authenticated attackers to write arbitrary files. The vulnerability affects RouterOS versions through 6.42 and can be exploited without special privileges or user interaction.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
n/a · n/a
public PoCs found — 38
exploitdbwww.exploit-db.com/exploits/45578unverifiedgithubgithub.com/BasuCert/WinboxPoC★ 519githubgithub.com/hacker30468/Mikrotik-router-hack★ 54githubgithub.com/jas502n/CVE-2018-14847★ 30githubgithub.com/sinichi449/Python-MikrotikLoginExploit★ 21githubgithub.com/syrex1013/MikroRoot★ 15githubgithub.com/msterusky/WinboxExploit★ 7githubgithub.com/K3ysTr0K3R/CVE-2018-14847-EXPLOIT★ 6githubgithub.com/mahmoodsabir/mikrotik-beast★ 6githubgithub.com/babyshen/routeros-CVE-2018-14847-bytheway★ 4githubgithub.com/tausifzaman/CVE-2018-14847★ 1githubgithub.com/mourafuseti/VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAS★ 1githubgithub.com/Tr33-He11/winboxPOC★ 1githubgithub.com/yukar1z0e/CVE-2018-14847★ 1githubgithub.com/luel-4013/misfortune-cookie★ 0githubgithub.com/TheMalwareGuardian/CVE-2018-14847★ 0vulncheckvulncheck.com/xdb/3a5dba2e76adunverifiedvulncheckvulncheck.com/xdb/3d8ffb2a755aunverifiedvulncheckvulncheck.com/xdb/02375d13c888unverifiedvulncheckvulncheck.com/xdb/0d4b0748eff2unverifiedvulncheckvulncheck.com/xdb/c2186194a7aeunverifiedcve_referencewww.exploit-db.com/exploits/45578/unverifiedvulncheckvulncheck.com/xdb/43b518507a82unverifiedvulncheckvulncheck.com/xdb/572a58ec0205unverifiedvulncheckvulncheck.com/xdb/ca877293c1a3unverifiedvulncheckvulncheck.com/xdb/64a0a764b901unverifiedvulncheckvulncheck.com/xdb/c9e4be4e4345unverifiedvulncheckvulncheck.com/xdb/6e85f1153945unverifiedvulncheckvulncheck.com/xdb/895d08413809unverifiedvulncheckvulncheck.com/xdb/8317dffde425unverifiedvulncheckvulncheck.com/xdb/73631394b47aunverifiedvulncheckvulncheck.com/xdb/128e7317908aunverifiedvulncheckvulncheck.com/xdb/5ae17ea456ebunverifiedvulncheckvulncheck.com/xdb/50f4e94eddfdunverifiedvulncheckvulncheck.com/xdb/81478e4d3f7cunverifiedvulncheckvulncheck.com/xdb/792af1f0da8funverifiedvulncheckvulncheck.com/xdb/b611d9ebb286unverifiedvulncheckvulncheck.com/xdb/6083a1b3aeebunverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.