RO
Product
RouterOS
On CISA KEVExploited in the wild
103
CVEs
5
On KEV
9.8
Max CVSS
4
New 30D
Severity mix
Critical 8High 38Medium 53Low 1
Watch
Add RouterOS to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2015-2350 | – | Mar 19 | Cross-site request forgery (CSRF) vulnerability in MikroTik RouterOS 5.0 and earlier allows remote attackers to hijack the authentication of administrators for requests that… Affected: through 5.0 |
| CVE-2012-6050 | – | Nov 27 | The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other… Affected: 5.15 |
| CVE-2008-6976 | – | Aug 19 | MikroTik RouterOS 3.x through 3.13 and 2.x through 2.9.51 allows remote attackers to modify Network Management System (NMS) settings via a crafted SNMP set request Affected: 2.0 through 2.9.51; 3.0 through 3.13 |
