CVE-2019-3943
Severity Score
8.1
*CVSS v3.1
Exploit Likelihood
*EPSS
Affected Versions
*CPE
Public Exploits
1
*Multiple Sources
Exploited in Wild
-
*KEV
Decision
-
*SSVC
Descriptions
MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read and write files outside of the sandbox directory (/rw/disk).
Las versiones de MikroTik RouterOS Stable versión 6.43.12 y versiones posteriores, Long-term versión 6.42.12 y versiones posteriores, y Testing versión 6.44beta75 y versiones anteriores son vulnerables a un salto de directorio remoto autenticado por medio de las interfaces HTTP o Winbox. Un ataque remoto autenticado puede usar esta vulnerabilidad para leer y escribir archivos fuera del directorio sandbox (/rw/disk).
*Credits:
N/A
CVSS Scores
Attack Vector
Attack Complexity
Privileges Required
User Interaction
Scope
Confidentiality
Integrity
Availability
Attack Vector
Attack Complexity
Authentication
Confidentiality
Integrity
Availability
* Common Vulnerability Scoring System
SSVC
- Decision:-
Exploitation
Automatable
Tech. Impact
* Organization's Worst-case Scenario
Timeline
- 2019-01-03 CVE Reserved
- 2019-04-10 CVE Published
- 2023-11-04 EPSS Updated
- 2024-08-04 CVE Updated
- 2024-08-04 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
- CWE-23: Relative Path Traversal
CAPEC
References (1)
| URL | Tag | Source |
|---|
| URL | Date | SRC |
|---|---|---|
| https://www.tenable.com/security/research/tra-2019-16 | 2024-08-04 |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | <= 6.42.12 Search vendor "Mikrotik" for product "Routeros" and version " <= 6.42.12" | ltr |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | <= 6.43.12 Search vendor "Mikrotik" for product "Routeros" and version " <= 6.43.12" | - |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc31, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc32, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc34, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc37, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc38, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc44, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc47, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc50, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc52, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc56, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc61, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.41 Search vendor "Mikrotik" for product "Routeros" and version "6.41" | rc66, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc11, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc12, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc14, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc15, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc18, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc2, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc20, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc23, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc24, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc27, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc28, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc30, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc35, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc37, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc39, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc41, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc43, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc46, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc48, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc49, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc5, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc52, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc56, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc6, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.42 Search vendor "Mikrotik" for product "Routeros" and version "6.42" | rc9, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc11, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc12, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc14, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc17, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc19, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc21, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc23, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc27, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc29, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc3, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc32, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc34, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc4, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc40, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc42, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc44, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc45, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc5, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc51, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc56, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc6, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc64, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc66, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.43 Search vendor "Mikrotik" for product "Routeros" and version "6.43" | rc7, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta14, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta17, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta20, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta28, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta39, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta40, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta50, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta54, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta6, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta61, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta75, testing |
Affected
| ||||||
| Mikrotik Search vendor "Mikrotik" | Routeros Search vendor "Mikrotik" for product "Routeros" | 6.44 Search vendor "Mikrotik" for product "Routeros" and version "6.44" | beta9, testing |
Affected
| ||||||