Approved changes feed: RSS · Atom
cpe:2.3:o:mikrotik:winbox:*:*:*:*:*:*:*:*
part: o version: * update: *
| Vendor | Mikrotik (b9632e46-e99f-51cb-bda8-96ec10af14a8) |
|---|---|
| Product | Winbox (b1f862e5-82d6-5ddf-850b-58e4e95bdc35) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-5721 |
vulnerable | 2026-06-03 14:42:57.150141 |
Details available
MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field is set and no Master Password is set. Keep Password is set by default and, by default Master Password is not set. An attacker with access to the configuration file can extract a username and password to gain access to the router.
Published: 2020-04-15T20:50:45.000Z
Updated: 2024-08-04T08:39:25.683Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-5720 |
vulnerable | 2026-06-03 14:42:57.149738 |
Details available
MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions. WinBox is vulnerable to this attack if it connects to a malicious endpoint or if an attacker mounts a man in the middle attack.
Published: 2020-02-06T16:51:16.000Z
Updated: 2024-08-04T08:39:25.501Z Reference links |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2019-3981 |
vulnerable | 2026-06-03 14:40:28.024623 |
Details available
MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed password.
Published: 2020-01-14T18:13:57.000Z
Updated: 2024-08-04T19:26:27.758Z Reference links |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.