CVE-2019-3978: High severity mikrotik routeros vulnerability
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2019-3978?
CVE-2019-3978 is considered a critical vulnerability due to its potential for cache poisoning and remote exploitation.
How do I fix CVE-2019-3978?
To mitigate CVE-2019-3978, upgrade to RouterOS version 6.45.7 or later, where the vulnerability is addressed.
What versions of RouterOS are affected by CVE-2019-3978?
RouterOS versions 6.45.6 and 6.44.5 and earlier are affected by CVE-2019-3978.
What type of attacks can CVE-2019-3978 enable?
CVE-2019-3978 allows remote unauthenticated attackers to trigger DNS queries, which can lead to cache poisoning.
Can CVE-2019-3978 be exploited without authentication?
Yes, CVE-2019-3978 can be exploited by attackers without requiring authentication.