The U.S. Cybersecurity and Infrastructure Security Agency (CISA) issued a warning on May 23, 2024, regarding a critical vulnerability present in MikroTik RouterOS. This flaw, designated CVE-2023-30799, allows for pre-authentication remote code execution (RCE) and can also lead…
Reports mentioning MikroTik
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) officially added two significant security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog on Friday, citing concrete evidence of their active exploitation in the wild.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has officially added five previously undisclosed security vulnerabilities to its Known Exploited Vulnerabilities (KEV) catalog. This action signifies that these flaws are currently being actively exploited by malicious actors in real-world attacks…
Hackers are actively exploiting a recently disclosed chain of two vulnerabilities within MikroTik RouterOS to gain unauthorized control over affected devices. The primary vector for these attacks involves routers that have their Secure Shell (SSH) services exposed directly…
Attackers are actively exploiting vulnerabilities in MikroTik routers, specifically targeting internet-accessible Secure Shell (SSH) services that lack authentication to achieve full administrative control. CERT Polska issued a warning on September 5, detailing that these successful attacks have been ongoing…