PT-2018-1178 · Mikrotik · Routeros+1

Juan Caillava + 1 · Published 2018-03-15 · Updated 2025-09-26 · CVE-2018-7445

Positive Technologies (AI Summary)

CVSS v3.1

10

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions prior to 6.41.3/6.42rc27

Description The issue is caused by a buffer overflow in the SMB service of MikroTik RouterOS, allowing remote attackers to execute arbitrary code on the system. This can be exploited before authentication takes place, making it possible for unauthenticated remote attackers to gain code execution.

Recommendations For versions prior to 6.41.3/6.42rc27, update to version 6.41.3 or 6.42rc27, or later, to resolve the issue. As a temporary workaround, consider restricting access to the SMB service until a patch is applied.

Exploit

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

BDU:2018-00633

CVE-2018-7445

Affected Products

Mikrotik Routeros

Routeros

References · 21

• 🔥 https://coresecurity.com/advisories/mikrotik-routeros-smb-buffer-overflow · Exploit
• 🔥 https://exploit-db.com/exploits/44290 · Exploit
• 🔥 http://seclists.org/fulldisclosure/2018/Mar/38 · Exploit
• https://osv.dev/vulnerability/CVE-2018-7445 · Vendor Advisory
• https://mikrotik.com/download · Security Note
• http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-7445 · Security Note
• https://bdu.fstec.ru/vul/2018-00633 · Security Note
• https://nvd.nist.gov/vuln/detail/CVE-2018-7445 · Security Note
• https://coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow#vendor_update · Security Note
• https://xakep.ru/2018/03/19/mikrotik-rce · Note
• https://cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7445 · Note
• https://t.me/ckure/3371 · Telegram Post
• https://t.me/cvenotify/117652 · Telegram Post
• https://cisa.gov/known-exploited-vulnerabilities-catalog · Note
• https://exchange.xforce.ibmcloud.com/collection/857fdecabbdbd6f8acc8bf957f8c704a · Note