PT-2019-1524 · Mikrotik · Routeros+1

Jacob Baines · Published 2019-02-04 · Updated 2025-08-15 · CVE-2019-3924

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions MikroTik RouterOS versions prior to 6.43.12 MikroTik RouterOS versions prior to 6.42.12

Description The issue is related to privilege management errors in the operating system. It allows a remote attacker to bypass firewall policies. The software executes user-defined network requests to both WAN and LAN clients, which can be used for bypassing the router's firewall or for network scanning activities.

Recommendations For versions prior to 6.43.12, update to version 6.43.12 or later. For versions prior to 6.42.12, update to version 6.42.12 or later. As a temporary workaround, consider restricting access to the network to minimize the risk of exploitation.

Exploit

Fix

Improper Privilege Management

Weakness Enumeration

CWE-441

CWE-269

Related Identifiers

BDU:2019-00991

CVE-2019-3924

Affected Products

Mikrotik Routeros

Routeros

References · 9

• 🔥 https://exploit-db.com/exploits/46444 · Exploit
• 🔥 https://tenable.com/security/research/tra-2019-07 · Exploit
• https://osv.dev/vulnerability/CVE-2019-3924 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-3924 · Security Note
• https://bdu.fstec.ru/vul/2019-00991 · Security Note
• http://securityfocus.com/bid/107177 · Note
• https://cxsecurity.com/cveshow/CVE-2019-3924 · Note
• https://securityfocus.com/bid/107177 · Note
• https://t.me/cveNotify/132523 · Telegram Post