Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18. A discrepancy in response size between connection attempts made with a valid username and those with an invalid username allows attackers to enumerate for valid accounts.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
NONE
Momentum
NONE
If you run products in this scope, you should treat this CVE as relevant to your environment.
🚨 CVE-2024-54772 - medium 🚨 MikroTik WinBox <= 6.49.17 - Username Enumeration > MikroTik RouterOS v6.43.13 through v6.49.13 and v6.43 through v7.17.2 contain an acco... 👾 https://cloud.projectdiscovery.io/library/CVE-2024-54772 @pdnuclei #NucleiTemplates #cve
2 of 2 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| OS | mikrotik | routeros | - | - | - |
| OS | mikrotik | routeros | - | - | - |