poslední zpráva · zachyceno
SPOJENO AI
MikroTik RouterOS WinBox Split-Principal Authentication Bypass and Privilege Escalation
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: , Summary: A remote authenticated user with read-only credentials can specify a full administrative account during stage two to obtain an admin session and persistently escalate privileges without knowing the admin password. Upgrade MikroTik RouterOS to version 7.24.5 (stable), 7.25rc1 (testing), or a later version. Verification tests confirm that the split-principal authentication flow is…
MikroTik FI IT
CVE v události 1
| CVE | hodnocení | KEV | EPSS |
|---|---|---|---|
| CVE-2026-103903 | 8.8 3.1 · ENISA 8.7 4.0 · ENISA | – | – |
Hodnocení z katalogů, všechna, se stupnicí CVSS a vydavatelem. Rozpad vektoru je na stránce CVE. Advisory v textu uvádí CVSS 8.8.
Jak se o tom psalo 2
-
· zachyceno · NCSC-FI FI nadpis události
MikroTik RouterOS WinBox Split-Principal Authentication Bypass and Privilege Escalation
Classification: Severe, Solution: Official Fix, Exploit Maturity: Not Defined, CVSSv3.1: 8.8, CVEs: , Summary: A remote authenticated user with read-only credentials can specify a full administrative account during stage two to obtain an admin session and persistently escalate privileges without knowing the admin password. Upgrade MikroTik RouterOS to version 7.24.5 (stable), 7.25rc1 (testing), or a later version. Verification tests confirm that the split-principal authentication flow is…
-
· CSIRT Itálie (ACN) IT
Risolta vulnerabilità in MikroTik RouterOS
Aggiornamenti di sicurezza per MikroTik RouterOS sanano una vulnerabilità con gravità "alta". Tale vulnerabilità, qualora sfruttata, potrebbe consentire a un utente malintenzionato remoto autenticato di eludere i meccanismi di sicurezza ed elevare i propri privilegi sui sistemi interessati.