CVE-2018-7445
Summary
| CVE | CVE-2018-7445 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2018-03-19 21:29:00 UTC |
| Updated | 2018-04-24 14:53:00 UTC |
| Description | A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable. |
Risk And Classification
EPSS: 0.610180000 probability, percentile 0.990610000 (date 2026-07-21)
CISA KEV: Listed on 2022-09-08; due 2022-09-29; ransomware use Unknown
Problem Types: CWE-119
CISA Known Exploited Vulnerability
| Vendor | MikroTik |
|---|---|
| Product | RouterOS |
| Name | MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability |
| Required Action | Apply updates per vendor instructions. |
| Notes | https://www.coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow#vendor_update, https://mikrotik.com/download; https://nvd.nist.gov/vuln/detail/CVE-2018-7445 |
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Mikrotik | Routeros | All | All | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc11 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc12 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc14 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc15 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc18 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc2 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc20 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc23 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc24 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc27 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc5 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc6 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc9 | All | All |
| Operating System | Mikrotik | Routeros | All | All | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc11 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc12 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc14 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc15 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc18 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc2 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc20 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc23 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc24 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc27 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc5 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc6 | All | All |
| Operating System | Mikrotik | Routeros | 6.4.2 | rc9 | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| Full Disclosure: [CORE-2018-0003] MikroTik RouterOS SMB Buffer Overflow | FULLDISC | seclists.org | Exploit, Mailing List, Third Party Advisory, VDB Entry |
| MikroTik RouterOS < 6.41.3/6.42rc27 - SMB Buffer Overflow - Hardware remote Exploit | EXPLOIT-DB | www.exploit-db.com | Exploit, Third Party Advisory, VDB Entry |
| MikroTik RouterOS CVE-2018-7445 Buffer Overflow Vulnerability | BID | www.securityfocus.com | Third Party Advisory, VDB Entry |
| MikroTik RouterOS SMB Buffer Overflow | Core Security | MISC | www.coresecurity.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
| CISA Known Exploited Vulnerabilities catalog | CISA | www.cisa.gov | kev |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.