Описание
MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbitrary files. Attackers can exploit this vulnerability to reset credential storage, which allows them access to the management interface as an administrator without authentication.
Ссылки
- Third Party Advisory
- ExploitThird Party Advisory
- Press/Media CoverageThird Party Advisory
- Release NotesVendor Advisory
- Third Party Advisory
- ExploitThird Party Advisory
- Press/Media CoverageThird Party Advisory
- Release NotesVendor Advisory
Уязвимые конфигурации
Одно из
EPSS
6.5 Medium
CVSS3
5.5 Medium
CVSS2
Дефекты
Связанные уязвимости
MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbitrary files. Attackers can exploit this vulnerability to reset credential storage, which allows them access to the management interface as an administrator without authentication.
Уязвимость операционной системы RouterOS маршрутизаторов MikroTik, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю удалить произвольные файлы, получить доступ к целевой системе с привилегиями администратора и изменить пароль администратора
EPSS
6.5 Medium
CVSS3
5.5 Medium
CVSS2