Privilege Escalation Risk in MikroTik RouterOS Due to Command Vulnerability

What changed

MikroTik RouterOS has been found to contain a significant flaw in its argument handling within the SSH login process. This vulnerability specifically affects usernames that start with certain prohibited characters, enabling attackers to alter the trusted RouterOS policy mask.

The flaw could potentially allow unauthorized users to escalate their privileges, posing a serious security risk to affected systems.

Who is affected

This vulnerability impacts users of MikroTik RouterOS, particularly those utilizing versions prior to the security updates.

Organizations relying on MikroTik for their networking solutions should be aware of the potential risks associated with this flaw.

• MikroTik RouterOS users on versions before 6.49.21, 7.23.4, and 7.24.2.
• Businesses using MikroTik devices for network management.
• IT departments managing MikroTik hardware in enterprise environments.

What to do

It is crucial for affected users to update their MikroTik RouterOS to the latest versions to mitigate the risk of exploitation. The fixed versions are 6.49.21 (Long-term), 7.23.4 (Long-term), and 7.24.2 (Stable).

Regularly monitoring for updates and applying security patches can help maintain a secure network environment.

• Upgrade to MikroTik RouterOS versions 6.49.21, 7.23.4, or 7.24.2.
• Implement security best practices for SSH access.
• Conduct a security audit of network devices to identify potential vulnerabilities.