CRITICAL🇵🇱 Wersja polska

CVE-2022-34960

CVSS 9.8v3.1pub. 2022-08-25upd. 2024-11-21

The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mikrotik Routeros

    OS
    Mikrotik
    7.4
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
Container
CWE
References

Related vulnerabilities

CVE-2018-14847CRITICAL9.1⚠ KEVPL ✓same product

MikroTik RouterOS — path traversal w interfejsie WinBox (odczyt/zapis plików)

CVE-2018-7445CRITICAL9.8⚠ KEVPL ✓same product

MikroTik RouterOS SMB — buffer overflow przed uwierzytelnieniem (RCE)

CVE-2023-30799CRITICAL9.1PL ✓same product

MikroTik RouterOS — privilege escalation admin do super-admin z możliwością RCE

CVE-2017-20149CRITICAL9.8PL ✓same product

MikroTik RouterOS — RCE przez uszkodzenie pamięci w serwerze WWW (Chimay-Red)

CVE-2025-6443HIGH7.2same product

Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability. This vulnerability allows remote atta...