CVE-2019-3924: vulnerability in Tenable MikroTik RouterOS
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
28Vexday Risk Score
No sign of exploitation. It has a public proof of concept.
ssvc Attendepss 16%
from disclosure to weapon1 day
Published on NVDFeb 20
1st PoC+1d
MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. A remote unauthenticated attacker can use this vulnerability to bypass the router's firewall or for general network scanning activities.
Affected products
Tenable · MikroTik RouterOSpublic PoCs found — 2✓ VexDay Proof
exploitdb✓ VexDay Proofwww.exploit-db.com/exploits/46444cve_referencewww.exploit-db.com/exploits/46444/unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.