PT-2025-39377 · Mikrotik · Mikrotik Routeros

A2Ure

·

Published

2025-09-11

·

Updated

2025-11-27

·

CVE-2025-10948

CVSS v2.0

9.0

High

VectorAV:N/AC:L/Au:S/C:C/I:C/A:C
Name of the Vulnerable Software and Affected Versions MikroTik RouterOS version 7
Description A buffer overflow issue exists in MikroTik RouterOS 7. The issue is located in the parse json element function within the libjson.so component, specifically accessible through the /rest/ip/address/print file. This allows for remote exploitation. The exploit has been publicly disclosed.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Buffer Overflow

Weakness Enumeration

CWE-119CWE-120

Related Identifiers

BDU:2025-13202
CVE-2025-10948

Affected Products

Mikrotik Routeros