CVE-2019-3924
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 16%
from disclosure to weapon1 days
Published on NVDFeb 20
1st PoC+1d
exploitation probability
16%top 3% of all CVEs
observed exploitation
nono source reports it
2 public exploit(s)
MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. A remote unauthenticated attacker can use this vulnerability to bypass the router's firewall or for general network scanning activities.
Affected products
Tenable · MikroTik RouterOSpublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/46444cve_referencewww.exploit-db.com/exploits/46444/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.