high7.5Public exploit code
CVE-2019-3978
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MikroTik RouterOS 6.45.6 - DNS Cache Poisoning2019-10-31 · remote · hardware
Impact
RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the attacker's choice. The DNS responses are cached by the router, potentially resulting in cache poisoning
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mikrotik | Routeros | through 6.44.5 through 6.45.6 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/155036/MikroTik-RouterOS-6.45.6-DNS-Cache-Poisoning.html
- https://www.tenable.com/security/research/tra-2019-46
- http://packetstormsecurity.com/files/155036/MikroTik-RouterOS-6.45.6-DNS-Cache-Poisoning.html
- https://www.tenable.com/security/research/tra-2019-46