CVE-2018-14847—MikroTik Router OS Directory Traversal Vulnerability

漏洞名称

MikroTik Router OS Directory Traversal Vulnerability

描述

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

已知用于勒索软件活动吗？

勒索软件状态：

Unknown

采集行动

Apply updates per vendor instructions.

其他说明

• https://nvd.nist.gov/vuln/detail/CVE-2018-14847

相关 CWE

• CWE-22