MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read and write files outside of the sandbox directory (/rw/disk).
| Software | From | Fixed in |
|---|---|---|
| mikrotik / routeros | - | 6.42.12.x |
| mikrotik / routeros | - | 6.43.12.x |
| mikrotik / routeros | 6.41-rc66 | 6.41-rc66.x |
| mikrotik / routeros | 6.41-rc61 | 6.41-rc61.x |
| mikrotik / routeros | 6.41-rc56 | 6.41-rc56.x |
| mikrotik / routeros | 6.41-rc52 | 6.41-rc52.x |
| mikrotik / routeros | 6.41-rc50 | 6.41-rc50.x |
| mikrotik / routeros | 6.41-rc47 | 6.41-rc47.x |
| mikrotik / routeros | 6.41-rc44 | 6.41-rc44.x |
| mikrotik / routeros | 6.41-rc38 | 6.41-rc38.x |
| mikrotik / routeros | 6.41-rc37 | 6.41-rc37.x |
| mikrotik / routeros | 6.41-rc34 | 6.41-rc34.x |
| mikrotik / routeros | 6.41-rc32 | 6.41-rc32.x |
| mikrotik / routeros | 6.41-rc31 | 6.41-rc31.x |
| mikrotik / routeros | 6.42-rc56 | 6.42-rc56.x |
| mikrotik / routeros | 6.42-rc52 | 6.42-rc52.x |
| mikrotik / routeros | 6.42-rc49 | 6.42-rc49.x |
| mikrotik / routeros | 6.42-rc48 | 6.42-rc48.x |
| mikrotik / routeros | 6.42-rc46 | 6.42-rc46.x |
| mikrotik / routeros | 6.42-rc43 | 6.42-rc43.x |
| mikrotik / routeros | 6.42-rc41 | 6.42-rc41.x |
| mikrotik / routeros | 6.42-rc39 | 6.42-rc39.x |
| mikrotik / routeros | 6.42-rc37 | 6.42-rc37.x |
| mikrotik / routeros | 6.42-rc35 | 6.42-rc35.x |
| mikrotik / routeros | 6.42-rc30 | 6.42-rc30.x |
| mikrotik / routeros | 6.42-rc28 | 6.42-rc28.x |
| mikrotik / routeros | 6.42-rc27 | 6.42-rc27.x |
| mikrotik / routeros | 6.42-rc24 | 6.42-rc24.x |
| mikrotik / routeros | 6.42-rc23 | 6.42-rc23.x |
| mikrotik / routeros | 6.42-rc20 | 6.42-rc20.x |
| mikrotik / routeros | 6.42-rc18 | 6.42-rc18.x |
| mikrotik / routeros | 6.42-rc15 | 6.42-rc15.x |
| mikrotik / routeros | 6.42-rc14 | 6.42-rc14.x |
| mikrotik / routeros | 6.42-rc12 | 6.42-rc12.x |
| mikrotik / routeros | 6.42-rc11 | 6.42-rc11.x |
| mikrotik / routeros | 6.42-rc6 | 6.42-rc6.x |
| mikrotik / routeros | 6.42-rc5 | 6.42-rc5.x |
| mikrotik / routeros | 6.42-rc2 | 6.42-rc2.x |
| mikrotik / routeros | 6.43-rc66 | 6.43-rc66.x |
| mikrotik / routeros | 6.43-rc64 | 6.43-rc64.x |
| mikrotik / routeros | 6.43-rc56 | 6.43-rc56.x |
| mikrotik / routeros | 6.43-rc51 | 6.43-rc51.x |
| mikrotik / routeros | 6.43-rc45 | 6.43-rc45.x |
| mikrotik / routeros | 6.43-rc44 | 6.43-rc44.x |
| mikrotik / routeros | 6.43-rc42 | 6.43-rc42.x |
| mikrotik / routeros | 6.43-rc40 | 6.43-rc40.x |
| mikrotik / routeros | 6.43-rc34 | 6.43-rc34.x |
| mikrotik / routeros | 6.43-rc32 | 6.43-rc32.x |
| mikrotik / routeros | 6.43-rc29 | 6.43-rc29.x |
| mikrotik / routeros | 6.43-rc27 | 6.43-rc27.x |
| mikrotik / routeros | 6.43-rc23 | 6.43-rc23.x |
| mikrotik / routeros | 6.43-rc21 | 6.43-rc21.x |
| mikrotik / routeros | 6.43-rc19 | 6.43-rc19.x |
| mikrotik / routeros | 6.43-rc17 | 6.43-rc17.x |
| mikrotik / routeros | 6.43-rc14 | 6.43-rc14.x |
| mikrotik / routeros | 6.43-rc12 | 6.43-rc12.x |
| mikrotik / routeros | 6.43-rc11 | 6.43-rc11.x |
| mikrotik / routeros | 6.43-rc7 | 6.43-rc7.x |
| mikrotik / routeros | 6.43-rc6 | 6.43-rc6.x |
| mikrotik / routeros | 6.43-rc5 | 6.43-rc5.x |
| mikrotik / routeros | 6.43-rc4 | 6.43-rc4.x |
| mikrotik / routeros | 6.43-rc3 | 6.43-rc3.x |
| mikrotik / routeros | 6.44-beta61 | 6.44-beta61.x |
| mikrotik / routeros | 6.44-beta54 | 6.44-beta54.x |
| mikrotik / routeros | 6.44-beta50 | 6.44-beta50.x |
| mikrotik / routeros | 6.44-beta40 | 6.44-beta40.x |
| mikrotik / routeros | 6.44-beta39 | 6.44-beta39.x |
| mikrotik / routeros | 6.44-beta28 | 6.44-beta28.x |
| mikrotik / routeros | 6.44-beta20 | 6.44-beta20.x |
| mikrotik / routeros | 6.44-beta17 | 6.44-beta17.x |
| mikrotik / routeros | 6.44-beta14 | 6.44-beta14.x |
| mikrotik / routeros | 6.44-beta9 | 6.44-beta9.x |
| mikrotik / routeros | 6.44-beta6 | 6.44-beta6.x |
| mikrotik / routeros | 6.44-beta75 | 6.44-beta75.x |
| mikrotik / routeros | 6.42-rc9 | 6.42-rc9.x |