MikroTik RouterOS Winbox Unauthenticated Arbitrary File Read/Write Vulnerability
Critical Nessus Plugin ID 117335
Synopsis
The remote networking device is affected by an unauthenticated arbitrary file read/write vulnerability.
Description
The remote networking device is running a version of MikroTik RouterOS vulnerable to an unauthenticated arbitrary file read and write vulnerability. An unauthenticated attacker could leverage this vulnerability to read or write protected files on the affected host.
Nessus was able to exploit this vulnerability to retrieve the device credential store.
Solution
Upgrade to MikroTik RouterOS 6.40.8 / 6.42.1 / 6.43rc4 or later.