PT-2019-2528 · Mikrotik · Routeros+1

Jacob Baines · Publicado 2019-04-10 · Atualizado 2019-12-17 · CVE-2019-3943

Positive Technologies (AI Summary)

CVSS v3.1

8.1

Alta

Vetor base

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions Stable 6.43.12 and below MikroTik RouterOS versions Long-term 6.42.12 and below MikroTik RouterOS versions Testing 6.44beta75 and below

Description The issue is related to directory traversal errors in the restricted access directory path. An authenticated, remote attack can exploit this to read and write files outside of the sandbox directory (/rw/disk) via the HTTP or Winbox interfaces.

Recommendations For MikroTik RouterOS versions Stable 6.43.12 and below, update to a version above 6.43.12 to resolve the issue. For MikroTik RouterOS versions Long-term 6.42.12 and below, update to a version above 6.42.12 to resolve the issue. For MikroTik RouterOS versions Testing 6.44beta75 and below, update to a version above 6.44beta75 to resolve the issue. As a temporary workaround, consider restricting access to the HTTP and Winbox interfaces until a patch is available.

Exploit

Correção

Relative Path Traversal

Path traversal

Enumeração de Fraquezas

CWE-23

CWE-22

Identificadores relacionados

BDU:2019-02371

CVE-2019-3943

Produtos afetados

Mikrotik Routeros

Routeros

Referências · 5

• 🔥 https://tenable.com/security/research/tra-2019-16 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2019-3943 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-3943 · Aviso do Fabricante
• https://bdu.fstec.ru/vul/2019-02371 · Nota de Segurança
• https://blog.mikrotik.com/security/cve-20193924-dude-agent-vulnerability.html · Nota