CVE Feed

    Dashboard / CVE / CVE-2018-14847

    CVE-2018-14847

    MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

    Published:Aug 2, 2018
    Last Modified:Nov 7, 2025
    EPS:Aug 2, 2018
    EPSS Score:0.92843
    CVSS Score:9.1

    CISA Notification

    Description

    MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

    Required Action:

    Apply updates per vendor instructions.

    Notes:

    No extra notes provided.

    Due Date
    Jun 1, 2022
    1563 days ago
    Alert Date
    Dec 1, 2021
    1745 days ago

    Affected Products

    Vendor
    Mikrotik
    Product
    Routeros

    Exploits

    https://github.com/BasuCert/WinboxPoChttps://github.com/BigNerd95/WinboxExploithttps://github.com/tenable/routeros/blob/master/bug_hunting_in_routeros_derbycon_2018.pdfhttps://github.com/tenable/routeros/tree/master/poc/bythewayhttps://github.com/tenable/routeros/tree/master/poc/cve_2018_14847https://n0p.me/winbox-bug-dissection/https://www.exploit-db.com/exploits/45578/https://github.com/BasuCert/WinboxPoChttps://github.com/BigNerd95/WinboxExploithttps://github.com/tenable/routeros/blob/master/bug_hunting_in_routeros_derbycon_2018.pdfhttps://github.com/tenable/routeros/tree/master/poc/bythewayhttps://github.com/tenable/routeros/tree/master/poc/cve_2018_14847https://n0p.me/winbox-bug-dissection/https://www.exploit-db.com/exploits/45578/https://www.exploit-db.com/exploits/45578https://github.com/babyshen/routeros-CVE-2018-14847-bythewayhttps://github.com/BasuCert/WinboxPoChttps://github.com/hacker30468/Mikrotik-router-hackhttps://github.com/jas502n/CVE-2018-14847https://github.com/K3ysTr0K3R/CVE-2018-14847-EXPLOIThttps://github.com/mahmoodsabir/mikrotik-beasthttps://github.com/mourafuseti/VULNERAVEL-CVE-2018-14847---CREDENCIAIS-EXTRAIDAShttps://github.com/msterusky/WinboxExploithttps://github.com/sinichi449/Python-MikrotikLoginExploithttps://github.com/syrex1013/MikroRoothttps://github.com/tausifzaman/CVE-2018-14847https://github.com/TheMalwareGuardian/CVE-2018-14847https://github.com/Tr33-He11/winboxPOChttps://github.com/yukar1z0e/CVE-2018-14847

    Related CVEs

    CVE-2026-86060 (CVSS 9.2) — RouterOS contains an argument-handling flaw in the SSH login path involving usernames that begin with a prohib…
    CVE-2026-67281 (CVSS 8.7) — RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jsproxy path where a newly allocat…
    CVE-2026-67279 (CVSS 6.9) — RouterOS SSH enters the connection protocol after a client-requested rekey even though user authentication was…
    CVE-2026-67278 (CVSS 6.3) — MikroTik RouterOS accepts malformed RSA/PKCS#1 v1.5 signatures during X.509 validation. Because its trust stor…
    CVE-2026-67277 (CVSS 8.8) — RouterOS accepts a "related" btest connection before the corresponding primary session has completed authentic…
    CVE-2026-67276 (CVSS 9.2) — RouterOS does not compare the complete RSA public key when matching an SSH authentication request to an author…
    CVE-2026-14227 (CVSS 6.9) — An API session‑management flaw in products with the MikroTik RouterOS API enabled are vulnerable to a Insuffic…
    CVE-2026-16347 (CVSS 8.7) — MikroTik RouterOS contains a weakness in its API authentication handling that lacks effective safeguards again…
    CVE-2026-39042 (CVSS 7.5) — An issue in MikroTIk (SIA Mikrotikls, Latvia) RouterOS 7.21.x before v.7.21.4 and 7.22.x before v.7.22.2 allow…
    CVE-2024-27686 (CVSS 7.5) — Mikrotik RouterOS (x86) 6.40.5 through 6.49.10 (fixed in 7) allows a remote attacker to cause a denial of serv…

    References

    https://github.com/BasuCert/WinboxPoC
    https://github.com/BigNerd95/WinboxExploit
    https://github.com/tenable/routeros/blob/master/bug_hunting_in_routeros_derbycon_2018.pdf
    https://github.com/tenable/routeros/tree/master/poc/bytheway
    https://github.com/tenable/routeros/tree/master/poc/cve_2018_14847
    https://mikrotik.com/supportsec/winbox-vulnerability
    https://n0p.me/winbox-bug-dissection/
    https://www.exploit-db.com/exploits/45578/
    https://github.com/BasuCert/WinboxPoC
    https://github.com/BigNerd95/WinboxExploit
    https://github.com/tenable/routeros/blob/master/bug_hunting_in_routeros_derbycon_2018.pdf
    https://github.com/tenable/routeros/tree/master/poc/bytheway
    https://github.com/tenable/routeros/tree/master/poc/cve_2018_14847
    https://n0p.me/winbox-bug-dissection/
    https://www.exploit-db.com/exploits/45578/
    https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2018-14847

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High