CVE-2019-3976CWE-23

RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name…

published October 28, 2019

CVSS
—
EPSS
2%
Percentile
76.7
In the wild
Unconfirmed
What it is

RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name field. If an authenticated user installs a malicious package then a directory could be created and the developer shell could be enabled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01675 · 76.7th percentile
Weakness
CWE-23 · Relative Path Traversal
Published
2019-10-28T21:32Z
EPSS history
Timeline
  • 28 OCT 21:32Z
    RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name…
    cvelistv5