MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability (CVE-2018-7445)
Severity: critical · Patch status: patched · Since 2022-09-08 · CVE-2018-7445
In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. CISA added CVE-2018-7445 to its Known Exploited Vulnerabilities catalog on Sep 8, 2022, which means attackers are exploiting it in the wild.
What to do
- Apply updates per vendor instructions.
- US federal agencies must remediate by Sep 29, 2022 (BOD 22-01); treat that as the outer limit.
Sources
All live incidents on Threat Watch
