PT-2009-2445 · Mikrotik · Routeros+1

Shados · Publicado 2009-08-18 · Atualizado 2022-02-09 · CVE-2008-6976

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Média

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions 2.x through 2.9.51 MikroTik RouterOS versions 3.x through 3.13

Description The issue allows remote attackers to modify Network Management System (NMS) settings via a crafted SNMP set request.

Recommendations For versions 2.x through 2.9.51, restrict access to SNMP to minimize the risk of exploitation. For versions 3.x through 3.13, consider disabling SNMP set requests until a patch is available.

Exploit

Correção

RCE

Enumeração de Fraquezas

CWE-20

Identificadores relacionados

CVE-2008-6976

Produtos afetados

Mikrotik Routeros

Routeros

Referências · 5

• 🔥 https://exploit-db.com/exploits/6366 · Exploit
• 🔥 http://securityfocus.com/bid/31025 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6976 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2008-6976 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44944 · Nota