جزئیات آسیب‌پذیری

خلاصه‌ی فارسی برای این آسیب‌پذیری هنوز تهیه نشده است.

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

• https://mikrotik.com/supportsec/winbox-vulnerability
• https://www.exploit-db.com/exploits/45578/ exploit
• https://github.com/BigNerd95/WinboxExploit
• https://github.com/tenable/routeros/blob/master/bug_hunting_in_routeros_derbycon_2018.pdf
• https://github.com/BasuCert/WinboxPoC
• https://github.com/tenable/routeros/tree/master/poc/cve_2018_14847
• https://n0p.me/winbox-bug-dissection/
• https://github.com/tenable/routeros/tree/master/poc/bytheway
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14847 government-resource