CVE-2021-27221

MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command

published March 19, 2021

CVSS
—
EPSS
4%
Percentile
90.6
In the wild
Unconfirmed
What it is

MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command. NOTE: the vendor's position is that this is intended behavior because of how user policies work

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.04045 · 90.6th percentile
Published
2021-03-19T02:28Z
EPSS history
Timeline
  • 19 MAR 02:28Z
    MikroTik RouterOS 6.47.9 allows remote authenticated ftp users to create or overwrite arbitrary .rsc files via the /export command
    cvelistv5