Actively exploited · Published Mar 19, 2018 · Assigned by mitre
CVE-2018-7445
Critical 9.8 Exploited
In plain English
A critical-severity memory corruption in RouterOS from MikroTik. Attackers are actively exploiting it in the wild (listed by CISA on September 8, 2022). The chance it is exploited in the next 30 days is estimated at 65.8% (higher than 99.3% of all known vulnerabilities). Apply updates per vendor instructions.
CISA guidance
Apply updates per vendor instructions.
Federal agencies must remediate by Sep 29, 2022.
Official description
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.
Affected products (as reported)
Weakness: CWE-119 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
References
- 103427 vdb-entry, x_refsource_BID
- 20180315 [CORE-2018-0003] MikroTik RouterOS SMB Buffer Overflow mailing-list, x_refsource_FULLDISC
- 44290 exploit, x_refsource_EXPLOIT-DB
- https://www.coresecurity.com/advisories/mikrotik-routeros-smb-buffer-overflow x_refsource_MISC
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-7445 government-resource