CVE-2018-7445
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
90Vexday Risk Score
Prioritize patching. It under exploitation confirmed by CISA and has a public proof of concept.
ssvc Actcvss 9.8epss 66%
from disclosure to weaponsame day
Published on NVDMar 19
1st PoCMar 15
CISA KEV+1634d
Action required by CISAfederal deadline: 2022-09-29
Apply updates per vendor instructions.
In short
A buffer overflow flaw in MikroTik RouterOS's SMB service allows unauthenticated attackers to send specially crafted network messages and execute arbitrary code on the router without needing a password.
Technical detail
Remote, unauthenticated buffer overflow in SMB NetBIOS session request handling (CWE-119) occurs prior to authentication validation, enabling arbitrary code execution via malformed messages. Affects all RouterOS architectures before 6.41.3/6.42rc27.
Summary generated and translated by AI from the official description.
The full analysis of this CVE is available in Portuguese →
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
n/a · n/apublic PoCs found — 3
exploitdbwww.exploit-db.com/exploits/44290unverifiedcve_referencewww.exploit-db.com/exploits/44290/unverifiedvulncheckvulncheck.com/xdb/a4ebb4cef4b7unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.