CVE-2019-3943CWE-23

MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote…

published April 10, 2019

CVSS
—
EPSS
4%
Percentile
89.6
In the wild
Unconfirmed
What it is

MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read and write files outside of the sandbox directory (/rw/disk).

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.03668 · 89.6th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2019-04-10T20:01Z
EPSS history
Timeline
  • 10 APR 20:01Z
    MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote…
    cvelistv5