CVE-2023-47310: Medium severity Mikrotik RouterOS vulnerability
Published Jun 30, 2025
·Updated
A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets.
Affected Software
1 affected component
Mikrotik RouterOS>=7.0, <7.14
Event History
Jun 30, 2025
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2023-47310?
CVE-2023-47310 is considered a high-severity vulnerability due to its potential for facilitating unauthorized access and network reconnaissance.
2
How do I fix CVE-2023-47310?
To fix CVE-2023-47310, upgrade MikroTik RouterOS to version 7.14 or later.
3
What are the potential impacts of CVE-2023-47310?
The impact of CVE-2023-47310 includes the ability for attackers to bypass firewall rules and conduct network scans using IPv6 UDP traceroute packets.
4
What versions of MikroTik RouterOS are affected by CVE-2023-47310?
CVE-2023-47310 affects MikroTik RouterOS versions from 7.0 up to, but not including, 7.14.
5
Is there a workaround for CVE-2023-47310 if I cannot update?
A potential workaround for CVE-2023-47310 involves manually modifying firewall settings to block incoming IPv6 UDP traceroute packets.