MikroTik · RouterOS
CVE-2018-7445
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
What it is
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.
CISA: In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.
What to do
Apply updates per vendor instructions.
Deadline for US federal agencies: September 29, 2022
More exploited flaws from MikroTik
| Added | Vulnerability | Product | Severity | Attack chance |
|---|---|---|---|---|
| Sep 25, 2026 | Improper Enforcement of Behavioral Workflow | RouterOS | Medium 6.9 | 2.3% |
| Sep 10, 2026 | Missing Authentication for Critical Function | RouterOS | High 8.8 | 1.6% |
| Sep 10, 2026 | Improper Neutralization of Argument Delimiters in a Command | RouterOS | Critical 9.2 | 6.4% |
| Dec 1, 2021 | Router OS Directory Traversal | RouterOS | Critical 9.1 | 96% |
Sources: Known Exploited Vulnerabilities (CISA, public domain), CVE records (cve.org) and EPSS (FIRST). The chance of attacks is the EPSS estimate that someone will try to exploit the flaw in the next 30 days.