← Zuruck zu CVEs

CVE-2018-7445

CRITICALCISA KEV

9.8

Beschreibung

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.

CVE Details

CVSS v3.1 Bewertung9.8

SchweregradCRITICAL

CVSS VektorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AngriffsvektorNETWORK

KomplexitatLOW

Erforderliche PrivilegienNONE

BenutzerinteraktionNONE

Veroffentlicht3/19/2018

Zuletzt geandert11/7/2025

Quellekev

Honeypot-Sichtungen0

CISA KEV

HerstellerMikroTik

ProduktRouterOS

SchwachstellennameMikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

KEV Aufnahmedatum2022-09-08

Behebungsfrist2022-09-29

Ransomware-NutzungUnknown

Betroffene Produkte

mikrotik:routeros

Schwachen (CWE)

CWE-119CWE-119

Referenzen

http://seclists.org/fulldisclosure/2018/Mar/38(cve@mitre.org)

http://www.securityfocus.com/bid/103427(cve@mitre.org)

https://www.coresecurity.com/advisories/mikrotik-routeros-smb-buffer-overflow(cve@mitre.org)

https://www.exploit-db.com/exploits/44290/(cve@mitre.org)

http://seclists.org/fulldisclosure/2018/Mar/38(af854a3a-2127-422b-91ae-364da2661108)

http://www.securityfocus.com/bid/103427(af854a3a-2127-422b-91ae-364da2661108)

https://www.coresecurity.com/advisories/mikrotik-routeros-smb-buffer-overflow(af854a3a-2127-422b-91ae-364da2661108)

https://www.exploit-db.com/exploits/44290/(af854a3a-2127-422b-91ae-364da2661108)

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7445(134c704f-9b21-4f2e-91b3-4a467353bcc0)

IOC Korrelationen

Keine Korrelationen erfasst

This product uses data from the NVD API but is not endorsed or certified by the NVD.