Intelligence online17 sources monitored8 actively exploited 7d26 published 24hChecked recently
Vulnerability record

CVE-2018-14847

MikroTik Router OS Directory Traversal Vulnerability

CriticalExploitation confirmedCISA KEV
What should I do?

This vulnerability is in the CISA Known Exploited Vulnerabilities catalog: attackers are using it. If you run RouterOS, fix it now.

CISA required action: Apply updates per vendor instructions.

US federal civilian agencies must remediate by Jun 1, 2022.

Patch status

No official fix confirmed yet

Until a fix ships, follow the vendor's mitigations and CISA's required action, limit exposure of affected systems, and watch this record for a patch.

Description

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

Source: NIST National Vulnerability Database. Official vulnerability data, reproduced as published.

Affected products

ProductVendorAffected versionsSource
RouterOSMikroTik<= 6.42KEV

Sources: KEV = CISA Known Exploited Vulnerabilities catalog.

Intelligence timeline

Developments from the last 30 days, newest first.

  1. CVSS scoredUpdateKEV

    CVE-2018-14847 scored CVSS 9.1: MikroTik RouterOS, MikroTik Router OS Directory Traversal Vulnerability

    CISA lists this as exploited in the wild. Unpatched RouterOS systems are exposed to active attacks now.

    Basis: NIST National Vulnerability Database

1 earlier event is available with a subscription. See plans.

Coverage

We have not published a story about this vulnerability yet.

References

  • nvd.nist.gov https://nvd.nist.gov/vuln/detail/CVE-2018-14847
  • github.com https://github.com/BasuCert/WinboxPoC
  • github.com https://github.com/BigNerd95/WinboxExploit
  • github.com https://github.com/tenable/routeros/blob/master/bug_hunting_in_routeros_derbycon_2018.pdf
  • github.com https://github.com/tenable/routeros/tree/master/poc/bytheway
  • github.com https://github.com/tenable/routeros/tree/master/poc/cve_2018_14847
  • mikrotik.com https://mikrotik.com/supportsec/winbox-vulnerability
  • n0p.me https://n0p.me/winbox-bug-dissection/
  • exploit-db.com https://www.exploit-db.com/exploits/45578/
  • cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14847