CVE-2019-3924CWE-441

MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability

published February 20, 2019

CVSS
—
EPSS
16%
Percentile
96.9
In the wild
Unconfirmed
What it is

MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. A remote unauthenticated attacker can use this vulnerability to bypass the router's firewall or for general network scanning activities.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.15697 · 96.9th percentile
Weakness
CWE-441 · Unintended Proxy or Intermediary ('Confused Deputy')
Published
2019-02-20T20:00Z
EPSS history
Timeline
  • 20 FEB 20:00Z
    MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability
    cvelistv5