Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: MikroTik Component: Winbox Clear all filters
TI-2020-04649 CVE-2020-5721 · GHSA-gqqr-qcv3-9xg2

Insufficiently protected credentials in MikroTik WinBox

Priority LOW 25

MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field is set and no Master Password is set.

CVSS 3.1MEDIUM 5.5 Local Low privileges No interaction EPSS 0.00382 Published 2020-04-15 No fix listed CWE-260
TI-2020-04648 CVE-2020-5720 · GHSA-v9mj-82v8-f72w

Path traversal in MikroTik WinBox

Priority LOW 29

MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions.

CVSS 3.1MEDIUM 5.9 Network No auth No interaction EPSS 0.01061 Published 2020-02-06 No fix listed CWE-22