MikroTik devices at Risk

[coxhaus]

I just came across this.

Super Admin elevation bug puts 900,000 MikroTik devices at risk

A critical severity 'Super Admin' privilege elevation flaw puts over 900,000 MikroTik RouterOS routers at risk, potentially enabling attackers to take full control over a device and remain undetected.

www.bleepingcomputer.com

 

[Justinh]

I'd consider just 'regular' admin privileges as game-over.

If MikroTik can't prevent "fully functional admin user by default, which nearly 60% of MikroTik devices still use", then I'm not impressed.

 

[Deepcuts]

Cmon...'En masse' exploitation is going to be more difficult since valid credentials are required