Aller au contenu
Se connecter
6.3 Moyenne

CVE-2026-56719 MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows…

Description

MikroTik RouterOS before 7.24 contains an out-of-bounds read vulnerability in the userspace SMB daemon that allows unauthenticated attackers to read beyond the end of the request buffer by supplying a crafted uniPwdLen field value in a minimal SMB1 SessionSetupAndX frame. The out-of-bounds read occurs in the SessionSetupAndX handler before any credential validation, potentially exposing sensitive memory contents.

Produits et versions touchés

Produit Versions touchées Corrigé en
RouterOS 7.24 premières → < 7.24.0 7.24.0
RouterOS 7.0 7.0.0 → 7.11.2 Pas de correctif indiqué
RouterOS 6.49 premières → 6.49.18 Pas de correctif indiqué

Autres CVE de RouterOS

Les 26 CVE de RouterOS →
CVE-2026-89035 MikroTik RouterOS through 7.24.5 contains a session token replay vulnerability in the WebFig interface that allows… 9.1 Critique CVE-2026-112158 A weakness has been identified in MikroTik RouterOS up to 6.40.5/6.44/7.20.8 7.1 Élevée CVE-2026-103903 An incorrect authorization vulnerability in the WinBox authentication flow of MikroTik RouterOS allows a remote… 8.7 Élevée CVE-2026-84411 The web management service in affected RouterOS versions contains an integer underflow in its HTTP request body handling… 9.8 Critique
Suivre cette CVE