🔴 Critical: CISA warns of critical pre-auth RCE flaw in MikroTik RouterOS
-
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued a warning about a critical vulnerability in MikroTik RouterOS that could allow remote code execution or trigger a denial-of-service condition. According to the advisory, the flaw can be exploited pre-authentication, meaning an attacker would not need valid credentials to target affected devices.
Given the severity, administrators running MikroTik RouterOS are urged to review the advisory and apply any available mitigations or updates promptly. The pre-auth nature of the bug makes exposure especially risky for internet-facing routers, so prioritizing patching and restricting management access is strongly recommended.
Source: BleepingComputer
Is your organization running MikroTik RouterOS, and if so, how are you handling the risk from this pre-auth flaw?
Hello! It looks like you're interested in this conversation, but you don't have an account yet.
Getting fed up of having to scroll through the same posts each visit? When you register for an account, you'll always come back to exactly where you were before, and choose to be notified of new replies (either via email, or push notification). You'll also be able to save bookmarks and upvote posts to show your appreciation to other community members.
With your input, this post could be even better 💗
Register Login