CVE-2019-3976(mikrotik / routeros)

LOWCVSS 8.8 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name field. If an authenticated user installs a malicious package then a directory could be created and the developer shell could be enabled.

mikrotik CVEs Back to dashboard

0.0/ 10 priority

Sources & remediation

Vendor / third-party advisories

Weakness type (CWE)

CWE-23CWE-22

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

NONE

Momentum

NONE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

routeros

Threat summary

1 mentions across 1 observed day

What's happening

1 total mentions across 1 day

Affected systems

Vendors

mikrotik

Products

routeros

Deep dive

Activity timeline1 mentions / 1d

Full discourse1 post

General Intels Daily@intels_daily14h
🔴 𝗖𝗥𝗜𝗧𝗜𝗖𝗔𝗟 · 𝗔𝗰𝗰𝗲𝘀𝘀 𝘀𝗮𝗹𝗲 🏢 Target: 𝗕𝗮𝗻𝗴𝗹𝗮𝗱𝗲𝘀𝗵 𝗔𝗿𝗺𝘆 🧩 Product: 𝗠𝗶𝗸𝗿𝗼𝗧𝗶𝗸 𝗥𝗼𝘂𝘁𝗲𝗿𝗢𝗦 🛡️ CVE-2018-14847, CVE-2019-3976 A threat actor claims to have fully compromised the Bangladesh Army network, specifically targeting a MikroTik router at the Qadirabad Cantonment. The actor provides extensive technical details, including internal network maps, device lists, PPPoE connections, and backup files containing passwords, and offers this access for sale. #AccessSale #InitialAccess #ThreatIntel #CTI
0000030
674 followersView on X

CPE platform detail2 entries

Part:

Vendor:

Product:

Version:

Target SW:

Target HW:

2 of 2 entries

Part	Vendor	Product	Version	Target SW	Target HW
OS	mikrotik	routeros	-	-	-
OS	mikrotik	routeros	-	-	-

Explore more

Back to dashboard mikrotik CVEs routeros vulnerabilities