Approved changes feed: RSS · Atom
cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Mikrotik (b9632e46-e99f-51cb-bda8-96ec10af14a8) |
|---|---|
| Product | Routeros (5be6495a-2d29-5f58-a51c-efc242ed2bda) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-7668 |
vulnerable | 2026-06-08 08:08:57.544706 |
MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out-of-bounds
HIGH (7.3)
A vulnerability was identified in MikroTik RouterOS 6.49.8. This vulnerability affects the function ASN1_STRING_data in the library nova/lib/www/scep.p of the component SCEP Endpoint. The manipulation of the argument transactionID/messageType leads to out-of-bounds read. The attack may be initiated remotely. The exploit is publicly available and might be used. You should upgrade the affected component. The vendor recommends to "use the latest v6.x or 7.x MikroTik RouterOS version, the reported issue should be fixed there."
Published: 2026-05-02T20:00:15.044Z
Updated: 2026-05-20T07:33:30.897Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-32154 |
vulnerable | 2026-06-08 06:04:45.067218 |
Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability
HIGH (7.5)
Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Mikrotik RouterOS. Authentication is not required to exploit this vulnerability.
The specific flaw exists within the Router Advertisement Daemon. The issue results from the lack of proper validation of user-supplied data, which can result in a write past the end of an allocated buffer. An attacker can leverage this vulnerability to execute code in the context of root.
. Was ZDI-CAN-19797.
Published: 2024-05-03T01:56:37.467Z
Updated: 2024-09-20T20:29:37.468Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2023-30799 |
vulnerable | 2026-06-08 06:04:41.174142 |
MikroTik RouterOS Administrator Privilege Escalation
CRITICAL (9.1)
MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.
Published: 2023-07-19T14:56:17.362Z
Updated: 2025-11-21T16:13:26.803Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45315 |
vulnerable | 2026-06-08 05:50:35.994813 |
Details available
MEDIUM (6.4)
Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated attackers to execute arbitrary code via a crafted packet.
Published: 2022-12-05T00:00:00.000Z
Updated: 2026-04-09T21:03:19.833Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-45313 |
vulnerable | 2026-06-08 05:50:35.993386 |
Details available
Mikrotik RouterOs before stable v7.5 was discovered to contain an out-of-bounds read in the hotspot process. This vulnerability allows attackers to execute arbitrary code via a crafted nova message.
Published: 2022-12-05T00:00:00.000Z
Updated: 2025-04-24T13:50:10.585Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-36522 |
vulnerable | 2026-06-08 05:46:07.506038 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-3014 |
vulnerable | 2026-06-08 05:33:50.662954 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36614 |
vulnerable | 2026-06-08 05:32:52.298403 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-36613 |
vulnerable | 2026-06-08 05:32:52.297774 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20267 |
vulnerable | 2026-06-08 05:21:03.963702 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20265 |
vulnerable | 2026-06-08 05:21:03.963146 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20264 |
vulnerable | 2026-06-08 05:21:03.962853 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20262 |
vulnerable | 2026-06-08 05:21:03.962562 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20252 |
vulnerable | 2026-06-08 05:21:03.961519 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20250 |
vulnerable | 2026-06-08 05:21:03.961241 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20249 |
vulnerable | 2026-06-08 05:21:03.960921 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20231 |
vulnerable | 2026-06-08 05:21:03.955344 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20230 |
vulnerable | 2026-06-08 05:21:03.955016 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20217 |
vulnerable | 2026-06-08 05:21:03.946368 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-20021 |
vulnerable | 2026-06-08 05:21:03.902191 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-11881 |
vulnerable | 2026-06-08 05:17:55.148813 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-10364 |
vulnerable | 2026-06-08 05:16:35.130465 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3924 |
vulnerable | 2026-06-08 05:13:56.435028 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-16160 |
vulnerable | 2026-06-08 05:13:07.825339 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-15055 |
vulnerable | 2026-06-08 05:12:56.600531 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13955 |
vulnerable | 2026-06-08 05:12:52.869430 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13954 |
vulnerable | 2026-06-08 05:12:52.867917 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-13074 |
vulnerable | 2026-06-08 05:12:40.853073 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-7445 |
vulnerable | 2026-06-08 05:12:03.687612 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-5951 |
vulnerable | 2026-06-08 05:11:53.136274 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1159 |
vulnerable | 2026-06-08 05:11:17.067226 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1158 |
vulnerable | 2026-06-08 05:11:17.066662 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1157 |
vulnerable | 2026-06-08 05:11:17.066309 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-1156 |
vulnerable | 2026-06-08 05:11:17.065827 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2018-14847 |
vulnerable | 2026-06-08 05:10:53.592438 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2017-20149 |
vulnerable | 2026-06-08 05:09:23.363878 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2015-2350 |
vulnerable | 2026-06-08 05:06:34.890190 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2008-6976 |
vulnerable | 2026-06-08 04:51:05.334135 | db.gcve.eu details were skipped to keep the page responsive. | Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.