CVE-2019-3924(mikrotik / routeros)

LOWCVSS 7.5 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

MikroTik RouterOS before 6.43.12 (stable) and 6.42.12 (long-term) is vulnerable to an intermediary vulnerability. The software will execute user defined network requests to both WAN and LAN clients. A remote unauthenticated attacker can use this vulnerability to bypass the router's firewall or for general network scanning activities.

mikrotik CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Exploit / PoC references

Vendor / third-party advisories

Weakness type (CWE)

CWE-441

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

routeros

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Affected systems

Vendors

mikrotik

Products

routeros

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

General Intels Daily@intels_daily21h
🔴 𝗖𝗥𝗜𝗧𝗜𝗖𝗔𝗟 · 𝗔𝗰𝗰𝗲𝘀𝘀 𝘀𝗮𝗹𝗲 🏢 Target: 𝗜𝗿𝗮𝗾𝗶 𝗠𝗶𝗻𝗶𝘀𝘁𝗿𝘆 𝗼𝗳 𝗙𝗶𝗻𝗮𝗻𝗰𝗲, 𝗥𝗮𝘀𝗵𝗲𝗲𝗱 𝗕𝗮𝗻𝗸, 𝗜𝗻𝗱𝘂𝘀𝘁𝗿𝗶𝗮𝗹 𝗕𝗮𝗻𝗸 𝗼𝗳 𝗜𝗿𝗮𝗾 🧩 Products: 𝗠𝗶𝗸𝗿𝗼𝗧𝗶𝗸 𝗥𝗕𝟮𝟬𝟭𝟭𝗨𝗶𝗔𝗦, 𝗥𝗼𝘂𝘁𝗲𝗿𝗢𝗦 🛡️ CVE-2018-14847, CVE-2019-3924 Threat actor Blacknet00 claims to have compromised a MikroTik router belonging to the Iraqi Ministry of Finance. The post details multiple vulnerabilities (including CVE-2018-14847 and SNMP misconfigurations) and provides extensive internal network details, routing tables, and lists of connected financial entities, including Rasheed Bank and the Industrial Bank of Iraq. #AccessSale #InitialAccess #ThreatIntel #CTI
0000092
687 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	mikrotik	routeros	-	-	-
OS	mikrotik	routeros	-	-	-

Explore more

Back to dashboard mikrotik CVEs routeros vulnerabilities