PT-2022-5756 · Mikrotik · Routeros+1

Published 2022-07-29 · Updated 2023-02-03 · CVE-2022-45313

Positive Technologies (AI Summary)

CVSS v2.0

10

High

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Mikrotik RouterOs versions prior to stable v7.5

Description The issue is related to an out-of-bounds read in the hotspot process, allowing attackers to execute arbitrary code via a crafted nova message. This is due to a buffer overflow vulnerability when handling a negative u32 id value, which can be exploited by sending specially crafted messages, potentially enabling remote code execution.

Recommendations For versions prior to stable v7.5, update to stable v7.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the hotspot process until a patch is available.

Exploit

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2022-07155

CVE-2022-45313

Affected Products

Mikrotik Routeros

Routeros

References · 11

• 🔥 https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/CVE-2022-45313/README.md · Exploit
• 🔥 https://github.com/cq674350529/pocs_slides/blob/master/advisory/MikroTik/vul_hotspot_1/README.md · Exploit
• 🔥 https://github.com/cq674350529/pocs_slides/tree/master/advisory/MikroTik/CVE-2022-45313 · Exploit
• https://osv.dev/vulnerability/CVE-2022-45313 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-45313 · Security Note
• https://bdu.fstec.ru/vul/2022-07155 · Security Note
• https://t.me/freedomf0x/18567 · Telegram Post
• https://t.me/pentestingnews/30870 · Telegram Post
• https://t.me/cybersecuritytechnologies/7314 · Telegram Post
• https://t.me/pentestingnews/30910 · Telegram Post
• https://t.me/cibsecurity/53989 · Telegram Post