#routeros
-
CISA flags critical pre-auth RCE flaw in MikroTik RouterOS
The U.S. cybersecurity agency warns of a flaw in the RouterOS web interface that lets an unauthenticated attacker run code as root with a single request.
-
MikroTrick: Taking Over MikroTik Routers Without a Password or Key
CERT Polska has detailed a chain of two RouterOS flaws that let attackers gain full administrative control of Internet-exposed MikroTik routers without ever completing authentication.
-
MikroTrick: attacks on MikroTik routers via internet-exposed SSH
CERT Polska warns: attackers are gaining full administrative control over MikroTik routers without authentication by exploiting an internet-accessible SSH service. The attacks have been recorded since at least September 2.