Skip to content
Sign in
9.1 Critical

CVE-2023-30799 MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue

Description

MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.

Affected products and versions

Product Affected versions Fixed in
RouterOS 6.49 earliest → < 6.49.7 6.49.7
RouterOS 6.48 earliest → 6.48.6 No fix stated

Other CVEs of RouterOS

The 26 CVEs of RouterOS →
CVE-2026-89035 MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows… 9.1 Critical CVE-2026-112158 A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8 7.1 High CVE-2026-103903 An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote… 8.7 High CVE-2026-84411 The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling… 9.8 Critical
Track this CVE