BlogPHP2Shell Exploitation: How Secure.com Can Protect YouRead more
← CVE Radar

CVE-2018-7445MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.

9.8 CRITICALEPSS 65.82%⚡ Known Exploited (CISA KEV)NVD: Analyzed

Overview

Severity

ScoreSeverityVersionVector String
9.8CRITICAL3.1NVDCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
10.0HIGH2.0NVDAV:N/AC:L/Au:N/C:C/I:C/A:C

CISA required action

⚡ Known exploited · remediation due Sep 29, 2022

Apply updates per vendor instructions.

Details

CVE ID
CVE-2018-7445
Status
Analyzed
Assigner (CNA)
mitre
Published
Mar 19, 2018
Last modified
2026-06-17 02:03 UTC
Weaknesses

Sources

Refreshed hourly from the sources above. Last fetched 2026-11-08 14:55 UTC.