CVE-2018-14847: MikroTik Router OS Directory Traversal Vulnerability
Published Aug 2, 2018
·Updated
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.
Affected Software
2 affected components
Mikrotik RouterOS<=6.42
Mikrotik RouterOS
Event History
Aug 2, 2018
CVE Published
via MITRE·07:00 AM
Data Sourced
via MITRE·07:00 AM
Description
Data Sourced
via NVD·07:29 AM
DescriptionSeverityWeaknessAffected Software
Dec 1, 2021
Known Exploited
via CISA·12:00 AM
Frequently Asked Questions
1
What is the vulnerability ID?
The vulnerability ID is CVE-2018-14847.
2
What is the severity of CVE-2018-14847?
The severity of CVE-2018-14847 is critical with a CVSS score of 9.1.
3
How does CVE-2018-14847 impact MikroTik RouterOS?
CVE-2018-14847 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.
4
Which version of MikroTik RouterOS is affected by CVE-2018-14847?
MikroTik RouterOS up to version 6.42 is affected by CVE-2018-14847.
5
Is there a fix available for CVE-2018-14847?
Yes, MikroTik has released a fix for CVE-2018-14847. It is recommended to update to the latest version of MikroTik RouterOS.