CRITICAL🇬🇧 English

CVE-2022-34960

CVSS 9.8v3.1pub. 2022-08-25upd. 2024-11-21

The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

  • Mikrotik Routeros

    OS
    Mikrotik
    7.4
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
Container
CWE
Referencje

Powiązane podatności

CVE-2018-14847CRITICAL9.1⚠ KEVten sam produkt

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote auth...

CVE-2018-7445CRITICAL9.8⚠ KEVten sam produkt

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messa...

CVE-2023-30799CRITICAL9.1ten sam produkt

MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation i...

CVE-2017-20149CRITICAL9.8ten sam produkt

The Mikrotik RouterOS web server allows memory corruption in releases before Stable 6.38.5 and Long-term 6.37....

CVE-2025-6443HIGH7.2ten sam produkt

Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability. This vulnerability allows remote atta...