MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbitrary files. Attackers can exploit this vulnerability to reset credential storage, which allows them access to the management interface as an administrator without authentication.

MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbitrary files. Attackers can exploit this vulnerability to reset credential storage, which allows them access to the management interface as an administrator without authentication.

Уязвимость операционной системы RouterOS маршрутизаторов MikroTik, существующая из-за недостаточной проверки входных данных, позволяющая нарушителю удалить произвольные файлы, получить доступ к целевой системе с привилегиями администратора и изменить пароль администратора