virus logo Intrusion Prevention

MikroTik.RouterOS.Arbitrary.File.Read

description-logoDescription

This indicates an attack attempt against a Arbitrary File Read vulnerability in MikroTik RouterOS.
The vulnerability is due to insufficient sanitizing of user supplied inputs in the application. A remote attacker can exploit this to gain unauthorized access to sensitive information.

affected-products-logoAffected Products

MikroTik RouterOS < 6.42.1
MikroTik RouterOS < 6.43rc4

Impact logoImpact

Information Disclosure: Remote attackers can gain sensitive information from vulnerable systems.

recomended-action-logoRecommended Actions

Upgrade to the latest version, available from the web site.
https://mikrotik.com/download

Telemetry logoTelemetry

Coverage

IPS (Regular DB)
IPS (Extended DB)

Version Updates

Date Version Detail
2019-02-07 14.544 Sig Added
2018-09-25 13.457 Sig Added

References

https://n0p.me/winbox-bug-dissection/
ID 46586
Created Aug 30, 2018
Updated Feb 07, 2019
Risk black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon black-background-circle-icon
CVE ID CVE-2018-14847
Known Exploited Yes
Exploit Prediction Score 97.5%
Default Action drop
Active
Affected OS Other
Affected App Other