PT-2023-8186 · Mikrotik · Routeros+1

CVE-2023-41570 · Publicado 2023-08-19 · Atualizado 2024-09-03

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Média

Vetor base

AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions 7.1 through 7.11

Description The issue is related to incorrect access control mechanisms in place for the Rest API, which can allow a remote attacker to disclose protected information.

Recommendations For versions 7.1 through 7.11, update to a version that contains a fix for this issue to resolve the problem. As a temporary workaround, consider restricting access to the Rest API until a patch is available.

Exploit

Correção

Improper Access Control

Enumeração de Fraquezas

CWE-284

Identificadores relacionados

BDU:2024-00174

CVE-2023-41570

Produtos afetados

Mikrotik Routeros

Routeros

Referências · 5

• 🔥 https://enricobassetti.it/2023/11/cve-2023-41570-access-control-vulnerability-in-mikrotik-rest-api · Exploit
• https://bdu.fstec.ru/vul/2024-00174 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2023-41570 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-41570 · Aviso do Fabricante
• https://t.me/cvenotify/93062 · Publicação no Telegram