- cross-posted to:
- [email protected]
- [email protected]
- netsec
- cross-posted to:
- [email protected]
- [email protected]
- netsec
Up until version 6.49.8 (July 20, 2023), MikroTik RouterOS Long-term was vulnerable to CVE-2023-30799. Remote and authenticated attackers can use the vulnerability to get a root shell on the router.
Makes me wonder why the default config enables those services on the outside interface anyway.