CVE-2019-3943
Summary
| CVE | CVE-2019-3943 |
|---|---|
| State | PUBLIC |
| Assigner | [email protected] |
| Source Priority | CVE Program / NVD first with legacy fallback |
| Published | 2019-04-10 21:29:00 UTC |
| Updated | 2019-12-17 19:19:00 UTC |
| Description | MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read and write files outside of the sandbox directory (/rw/disk). |
Risk And Classification
Problem Types: CWE-22
NVD Known Affected Configurations (CPE 2.3)
| Type | Vendor | Product | Version | Update | Edition | Language |
|---|---|---|---|---|---|---|
| Operating System | Mikrotik | Routeros | 6.41 | rc31 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc32 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc34 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc37 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc38 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc44 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc47 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc50 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc52 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc56 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc61 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc66 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc11 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc12 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc14 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc15 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc18 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc2 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc20 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc23 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc24 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc27 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc28 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc30 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc35 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc37 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc39 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc41 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc43 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc46 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc48 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc49 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc5 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc52 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc56 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc6 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc9 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc11 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc12 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc14 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc17 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc19 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc21 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc23 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc27 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc29 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc3 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc32 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc34 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc4 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc40 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc42 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc44 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc45 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc5 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc51 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc56 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc6 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc64 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc66 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc7 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta14 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta17 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta20 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta28 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta39 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta40 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta50 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta54 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta6 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta61 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta75 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta9 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc31 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc32 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc34 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc37 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc38 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc44 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc47 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc50 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc52 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc56 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc61 | All | All |
| Operating System | Mikrotik | Routeros | 6.41 | rc66 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc11 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc12 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc14 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc15 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc18 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc2 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc20 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc23 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc24 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc27 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc28 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc30 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc35 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc37 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc39 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc41 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc43 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc46 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc48 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc49 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc5 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc52 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc56 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc6 | All | All |
| Operating System | Mikrotik | Routeros | 6.42 | rc9 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc11 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc12 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc14 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc17 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc19 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc21 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc23 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc27 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc29 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc3 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc32 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc34 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc4 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc40 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc42 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc44 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc45 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc5 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc51 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc56 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc6 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc64 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc66 | All | All |
| Operating System | Mikrotik | Routeros | 6.43 | rc7 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta14 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta17 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta20 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta28 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta39 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta40 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta50 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta54 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta6 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta61 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta75 | All | All |
| Operating System | Mikrotik | Routeros | 6.44 | beta9 | All | All |
| Operating System | Mikrotik | Routeros | All | All | All | All |
| Operating System | Mikrotik | Routeros | All | All | All | All |
References
| Reference | Source | Link | Tags |
|---|---|---|---|
| MikroTik RouterOS Authenticated Directory Traversal - Research Advisory | Tenable® | MISC | www.tenable.com | Exploit, Third Party Advisory |
| CVE Program record | CVE.ORG | www.cve.org | canonical |
| NVD vulnerability detail | NVD | nvd.nist.gov | canonical, analysis |
No vendor comments have been submitted for this CVE.
There are currently no legacy QID mappings associated with this CVE.