PT-2019-4067 · Mikrotik · Routeros+1

Publicado 2019-09-11 · Atualizado 2021-12-09 · CVE-2019-3977

Positive Technologies (AI Summary)

CVSS v2.0

8.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:N/I:C/A:P

Name of the Vulnerable Software and Affected Versions RouterOS versions 6.45.6 and earlier RouterOS versions 6.44.5 and earlier

Description The issue is related to insufficient validation of upgrade packages when using the autoupgrade feature, allowing a remote attacker to trick the router into "upgrading" to an older version of RouterOS. This could lead to the reset of all system usernames and passwords, potentially giving the attacker unauthorized access to the system. The vulnerability is associated with the download of code without checking its integrity.

Recommendations For RouterOS versions 6.45.6 and earlier, consider disabling the autoupgrade feature until a patch is available to prevent potential exploitation. For RouterOS versions 6.44.5 and earlier, restrict access to the upgrade feature to minimize the risk of exploitation. Avoid using the autoupgrade feature in RouterOS until the issue is resolved.

Correção

Enumeração de Fraquezas

CWE-494

Identificadores relacionados

BDU:2019-04628

CVE-2019-3977

Produtos afetados

Mikrotik Routeros

Routeros

Referências · 7

• https://blog.mikrotik.com/security/package-validation-and-upgrade-vulnerability.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2019-3977 · Nota de Segurança
• https://bdu.fstec.ru/vul/2019-04628 · Nota de Segurança
• https://tenable.com/security/research/tra-2019-46 · Nota
• https://osv.dev/vulnerability/CVE-2019-3977 · Aviso do Fabricante
• https://t.me/true_secator/2427 · Publicação no Telegram
• https://t.me/cybershit/608 · Publicação no Telegram