PT-2009-2445 · Mikrotik · Routeros+1

Shados · Published 2009-08-18 · Updated 2022-02-09 · CVE-2008-6976

Positive Technologies (AI Summary)

CVSS v2.0

6.4

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:N

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions 2.x through 2.9.51 MikroTik RouterOS versions 3.x through 3.13

Description The issue allows remote attackers to modify Network Management System (NMS) settings via a crafted SNMP set request.

Recommendations For versions 2.x through 2.9.51, restrict access to SNMP to minimize the risk of exploitation. For versions 3.x through 3.13, consider disabling SNMP set requests until a patch is available.

Exploit

Fix

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2008-6976

Affected Products

Mikrotik Routeros

Routeros

References · 5

• 🔥 https://exploit-db.com/exploits/6366 · Exploit
• 🔥 http://securityfocus.com/bid/31025 · Exploit
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-6976 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2008-6976 · Security Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/44944 · Note