Skip to content
Sign in
Not rated

CVE-2020-5720 MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files…

Description

MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions. WinBox is vulnerable to this attack if it connects to a malicious endpoint or if an attacker mounts a man in the middle attack.

Affected products and versions

Product Affected versions Fixed in
MikroTik WinBox Versions not published

Other CVEs of MikroTik WinBox

The 2 CVEs of MikroTik WinBox →
CVE-2020-5721 MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when… Not rated
Track this CVE