MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

attackerkb 1

malwarebytes 1

thn 7

mssecure 1

packetstorm 2

nessus 2

exploitdb 2

cisa_kev 1

exploitpack 2

zdt 1

cve 1

openvas 2

threatpost 6

mmpc 1

prion 1

checkpoint_advisories 1

talosblog 1

impervablog 2

hackread 1

rapid7blog 1

kitploit 1

cisa 1

ics 1

attackerkb

CVE-2018-14847

2018-08-02 00:00:00

malwarebytes

Fake browser update seeks to compromise more MikroTik routers

2018-10-12 15:00:06

thn

Imperva Thwarts 2.5 Million RPS Ransom DDoS Extortion Attacks

2022-03-05 07:53:00

Mēris Botnet Hit Russia's Yandex With Massive 22 Million RPS DDoS Attack

2021-09-11 11:18:00

Botnet of Thousands of MikroTik Routers Abused in Glupteba, TrickBot Campaigns

2022-03-23 09:49:00

mssecure

Uncovering Trickbot’s use of IoT devices in command-and-control infrastructure

2022-03-16 15:00:00

packetstorm

Mikrotik RouterOS Remote Root

2018-10-10 00:00:00

Mikrotik WinBox 6.42 Credential Disclosure

2018-08-17 00:00:00

nessus

MikroTik RouterOS Winbox Unauthenticated Arbitrary File Read/Write Vulnerability

2018-09-06 00:00:00

MikroTik RouterOS Path Traversal (CVE-2018-14847)

2024-02-27 00:00:00

exploitdb

Mikrotik WinBox 6.42 - Credential Disclosure (golang)

2018-08-17 00:00:00

MicroTik RouterOS < 6.43rc3 - Remote Root

2018-10-10 00:00:00

cisa_kev

MikroTik Router OS Directory Traversal Vulnerability

2021-12-01 00:00:00

exploitpack

MicroTik RouterOS 6.43rc3 - Remote Root

2018-10-10 00:00:00

Mikrotik WinBox 6.42 - Credential Disclosure (golang)

2018-08-17 00:00:00

zdt

MicroTik RouterOS < 6.43rc3 - Remote Root Exploit

2018-10-10 00:00:00

cve

CVE-2018-14847

2018-08-02 07:29:00

openvas

Mikrotik RouterOS 'Winbox Service' Information Disclosure Vulnerability - Version Check

2018-04-25 00:00:00

Mikrotik RouterOS 'Winbox Service' Information Disclosure Vulnerability - Active Check

2018-07-06 00:00:00

threatpost

Yandex Pummeled by Potent Meris DDoS Botnet

2021-09-10 16:31:14

Thousands of MikroTik Routers Hijacked for Eavesdropping

2018-09-04 18:34:10

Massive Meris Botnet Embeds Ransomware Notes from REvil

2022-03-04 22:46:59

mmpc

Uncovering Trickbot’s use of IoT devices in command-and-control infrastructure

2022-03-16 15:00:00

prion

Directory traversal

2018-08-02 07:29:00

checkpoint_advisories

MikroTik RouterOS Winbox Authentication Bypass (CVE-2018-14847)

2018-08-06 00:00:00

talosblog

VPNFilter III: More Tools for the Swiss Army Knife of Malware

2018-09-26 07:59:00

impervablog

Imperva Mitigates Ransom DDoS Attack Measuring 2.5 Million Requests per Second

2022-03-04 15:21:44

The 3 Biggest DDoS Attacks Imperva Has Mitigated

2022-05-31 15:12:48

hackread

MikroTik router vulnerability lets hackers bypass firewall to load malware undetected

2018-10-09 17:37:16

rapid7blog

Metasploit Wrap-Up

2020-11-06 19:55:51

kitploit

Darksplitz - Exploit Framework

2019-04-04 21:12:00

cisa

CISA Adds Five Known Exploited Vulnerabilities to Catalog

2021-12-01 00:00:00

ics

People’s Republic of China State-Sponsored Cyber Actors Exploit Network Providers and Devices

2022-06-10 12:00:00

Solutions

Vulnerabilities intelligence
Perimeter control tool
Linux scanner
Windows scanner
Developers SDK
Security Intelligence feeds

Database

Vulnerabilities
Exploits
Security News
BugBounty
Wild Exploited
Top Vulnerabilities
CVE Feed

Resources

Statics & Sources
Plugins
API docs
FAQ
Blog
Glossary

Company

About
Contacts
Pricing
EULA
Privacy Policy
Submission Policy
OpenSource

@2024 Vulners Inc

6.6 Medium

AI Score

Confidence

Low

0.975 High

EPSS

Percentile

100.0%

JSON

Related for CVELIST:CVE-2018-14847