CVE-2022-45315CWE-125

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process

Medium · published December 5, 2022

CVSS v3.1
6.4
EPSS
1%
Percentile
72.1
In the wild
Unconfirmed
What it is

⚠️ A crafty packet can lead to an out-of-bounds read in Mikrotik RouterOS, letting authenticated attackers run arbitrary code! Don't let those packets run wild! Think of this like a restaurant where a waiter can access the kitchen with an unauthorized dish. If they slip in a cleverly crafted order, they might cook up something unexpected on the stove! With this vulnerability, an attacker could potentially execute any code they wish, causing chaos in your network environment. This means they could alter settings, disrupt services, or even gain deeper access to sensitive information. Not ideal for maintaining your network's integrity, right?

Put simply

Think of this like a restaurant where a waiter can access the kitchen with an unauthorized dish. If they slip in a cleverly crafted order, they might cook up something unexpected on the stove! This out-of-bounds read vulnerability exists in the SNMP process of Mikrotik RouterOS versions prior to 7.6, allowing authenticated users to manipulate packet data and execute arbitrary code on the device.

What to do

With this vulnerability, an attacker could potentially execute any code they wish, causing chaos in your network environment. This means they could alter settings, disrupt services, or even gain deeper access to sensitive information. Not ideal for maintaining your network's integrity, right? To secure your routers, update Mikrotik RouterOS to version 7.6 or later immediately. Additionally, review your authentication policies to ensure that only trusted users have access. Regularly check for updates to maintain your security posture. You've got this! With these steps, you can secure your network and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:A/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01388 · 72.1th percentile
Weakness
CWE-125 · Out-of-bounds Read
Published
2022-12-05T00:00Z
EPSS history
Timeline
  • 05 DEC 00:00Z
    Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process
    cvelistv5