MikroTik RouterOS Winbox Unauthenticated Arbitrary File Read/Write Vulnerability
Critical Nessus Plugin ID 117335
Synopsis
The remote networking device is affected by an unauthenticated
arbitrary file read/write vulnerability.
Description
The remote networking device is running a version of MikroTik
RouterOS vulnerable to an unauthenticated arbitrary file read and
write vulnerability. An unauthenticated attacker could leverage this
vulnerability to read or write protected files on the affected host.
Nessus was able to exploit this vulnerability to retrieve the device
credential store.
Solution
Upgrade to MikroTik RouterOS 6.40.8 / 6.42.1 / 6.43rc4 or later.