Sploitus

51 exploited vulnerabilities in Routeros

Showing 1–50 of 51, highest-scoring first

Vendors
Mikrotik, Openvpn
With known exploits
51
Affected Mikrotik Routeros versions
All versions

Vulnerabilities with exploits

Highest CVSS first — 12 of these already have exploit code on Sploitus

CVE-2022-45315
CVSS 10.0 CRITICAL 2022-07-29FIX AVAILABLE
CVE-2022-45313
CVSS 10.0 HIGH 2022-07-29FIX AVAILABLE
CVE-2018-7445 7 exploits
CVSS 10.0 CRITICAL 2018-03-15FIX AVAILABLE
MicroTik RouterOS SMB buffer overflowMicroTik RouterOS SMB buffer overflow
CVE-2017-20149 1 exploit
CVSS 10.0 CRITICAL 2017-10-14FIX AVAILABLE
Exploit for Out-of-bounds Write in Mikrotik Routeros
CVE-2018-14847 24 exploits
CVSS 9.1 CRITICAL 2018-04-23FIX AVAILABLE
EXPLOIT_POCExploit for Path Traversal in Mikrotik Routeros
CVE-2018-1156
CVSS 9.0 HIGH 2018-08-23FIX AVAILABLE
CVE-2021-41987
CVSS 8.1 HIGH 2022-03-16FIX AVAILABLE
CVE-2019-3943 3 exploits
CVSS 8.1 HIGH 2019-04-10FIX AVAILABLE
MikroTik RouterOS 6.45.6 DNS Cache PoisoningMikroTik RouterOS 6.45.6 - DNS Cache Poisoning
CVE-2018-10066
CVSS 8.1 HIGH 2018-04-13
CVE-2024-27686 7 exploits
CVSS 7.8 HIGH 2024-04-01FIX AVAILABLE
📄 MikroTik RouterOS 6.40.10 Denial of ServiceExploit for CVE-2024-27686
CVE-2023-30800 1 exploit
CVSS 7.8 HIGH 2023-04-18FIX AVAILABLE
Exploit for Out-of-bounds Write in Mikrotik Routeros
CVE-2020-22845
CVSS 7.8 HIGH 2020-07-10
CVE-2020-22844
CVSS 7.8 HIGH 2020-07-10
CVE-2020-10364
CVSS 7.8 HIGH 2020-03-19FIX AVAILABLE
CVE-2019-3978 4 exploits
CVSS 7.8 HIGH 2019-10-28FIX AVAILABLE
MikroTik RouterOS 6.45.6 DNS Cache PoisoningMikroTik RouterOS 6.45.6 - DNS Cache Poisoning
CVE-2019-15055
CVSS 7.7 HIGH 2019-08-26FIX AVAILABLE
CVE-2026-7668
CVSS 7.5 HIGH 2026-05-02
CVE-2020-11881 1 exploit
CVSS 7.5 HIGH 2020-09-14FIX AVAILABLE
Exploit for Improper Validation of Array Index in Mikrotik Routeros
CVE-2019-3924 3 exploits
CVSS 7.5 HIGH 2019-02-04FIX AVAILABLE
MikroTik RouterOS < 6.43.12 (stable) / < 6.42.12 (long-term) - Firewall and NAT BypassMikroTik RouterOS 6.43.12 (stable) 6.42.12 (long-term) - Firewall and NAT Bypass
CVE-2018-5951
CVSS 7.1 HIGH 2020-03-02
CVE-2020-20221
CVSS 6.8 MEDIUM 2021-07-21FIX AVAILABLE
CVE-2020-20262
CVSS 6.8 MEDIUM 2021-05-04FIX AVAILABLE
CVE-2018-1159
CVSS 6.8 MEDIUM 2018-08-23FIX AVAILABLE
CVE-2018-1158
CVSS 6.8 MEDIUM 2018-08-23FIX AVAILABLE
CVE-2018-1157
CVSS 6.8 MEDIUM 2018-08-23FIX AVAILABLE
CVE-2015-2350
CVSS 6.8 MEDIUM 2015-03-19FIX AVAILABLE
CVE-2022-36522
CVSS 6.5 MEDIUM 2022-08-26
CVE-2021-36614
CVSS 6.5 MEDIUM 2022-05-11FIX AVAILABLE
CVE-2021-36613
CVSS 6.5 MEDIUM 2022-05-11FIX AVAILABLE
CVE-2020-20267
CVSS 6.5 MEDIUM 2021-05-11FIX AVAILABLE
CVE-2020-20266
CVSS 6.5 MEDIUM 2021-05-19FIX AVAILABLE
CVE-2020-20265
CVSS 6.5 MEDIUM 2021-05-11FIX AVAILABLE
CVE-2020-20264
CVSS 6.5 MEDIUM 2021-05-19FIX AVAILABLE
CVE-2020-20254
CVSS 6.5 MEDIUM 2021-05-18FIX AVAILABLE
CVE-2020-20253
CVSS 6.5 MEDIUM 2021-05-18FIX AVAILABLE
CVE-2020-20252
CVSS 6.5 MEDIUM 2021-07-13FIX AVAILABLE
CVE-2020-20250
CVSS 6.5 MEDIUM 2021-07-13FIX AVAILABLE
CVE-2020-20249
CVSS 6.5 MEDIUM 2021-07-19FIX AVAILABLE
CVE-2020-20248
CVSS 6.5 MEDIUM 2021-07-19FIX AVAILABLE
CVE-2020-20245
CVSS 6.5 MEDIUM 2021-05-18FIX AVAILABLE
CVE-2020-20231
CVSS 6.5 MEDIUM 2021-07-14FIX AVAILABLE
CVE-2020-20230
CVSS 6.5 MEDIUM 2021-07-19FIX AVAILABLE
CVE-2020-20220
CVSS 6.5 MEDIUM 2021-05-18FIX AVAILABLE
CVE-2020-20217
CVSS 6.5 MEDIUM 2021-07-08FIX AVAILABLE
CVE-2012-6050 1 exploit
CVSS 6.4 MEDIUM 2012-11-27FIX AVAILABLE
Mikrotik Router - Denial of Service
CVE-2008-6976 1 exploit
CVSS 6.4 MEDIUM 2009-08-18FIX AVAILABLE
MikroTik RouterOS 3.13 - SNMP write (Set request)
CVE-2021-3014
CVSS 6.1 MEDIUM 2021-01-04
CVE-2017-6297
CVSS 5.9 MEDIUM 2017-02-27FIX AVAILABLE
CVE-2024-54772 1 exploit
CVSS 5.5 MEDIUM 2024-11-27FIX AVAILABLE
Exploit for Observable Timing Discrepancy in Mikrotik Routeros
CVE-2023-41570
CVSS 5.3 MEDIUM 2023-08-19FIX AVAILABLE