https://forum.mikrotik.com/viewtopic.php?f=21&t=133533
Quoted in full:
We have discovered a new RouterOS vulnerability affecting all RouterOS versions since v6.29.
How it works: The vulnerability allowed a special tool to connect to the Winbox port, and request the system user database file...