IP-DB.com
Türkçe English Deutsch Español
Entrar Obtener clave API
6.5Media

CVE-2026-56719MikroTik RouterOS < 7.24 Out-of-Bounds Read via SMB1 SessionSetupAndX

MikroTik RouterOS Publicada: (hace 1 mes)

Descripción

MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read occurs in the SessionSetupAndX handler before any credential validation, potentially exposing sensitive memory contents.

Debilidad (CWE): CWE-125

Datos: CVE.org, NVD, CISA KEV, FIRST EPSS, Ubuntu. Se publican tal como los indican las fuentes, en inglés.

Productos y versiones afectados

FabricanteProductoVersiones
MikroTik RouterOS ≤ 6.49.18, 7.0.0 – ≤ 7.11.2, fixed 7.24.0

Referencias y parches

CVE recientes del mismo producto — MikroTik RouterOS

6.5Media
CVE-2026-112158

MikroTik RouterOS ipt_SAME.ko same_check integer overflow

MikroTik RouterOS

A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8. Impacted is the function same_check of the file ipt_SAME.ko. Executing a manipulation can lead to integer overflow. The attack may be launched remotely. Upgrading to version 7.21.5 …

9.8Crítica
CVE-2026-84411

MikroTik RouterOS Integer Underflow

MikroTik RouterOS

The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling that is reachable before authentication. This can be leveraged by an unauthenticated network attacker to achieve arbitrary code execution …