low3.7
CVE-2019-3981
MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks.
Impact
MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed password.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Mikrotik | Routeros | before 6.43 |
| Mikrotik | Winbox | before 3.20 |