CVE Watch—

CVE-2018-7445

MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

CVSS

—

No CVSS

EPSS

60.8%

p99

KEV

YES

Sep 8, 2022

Exploit Today

0-100

Published: — · Last modified: —

EPSS · 30d

60.8%EPSS · 30 days60.8%

2026-09-172026-10-15

KEV catalog record

Product

MikroTik / RouterOS

Vulnerability

MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

Added to KEV

Sep 8, 2022

Remediate by

Sep 29, 2022

Known ransomware use

Summary description

In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.

Required action

Apply updates per vendor instructions.

Notes

https://www.coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow#vendor_update, https://mikrotik.com/download; https://nvd.nist.gov/vuln/detail/CVE-2018-7445

Related CVEs

CVECVSSEPSSKEVRExploitTitleMod.

CVE-2026-860609.8 CRI

93.6%

KEV—78MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability35d CVE-2026-672796.5 MED

62.9%

KEV—69Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability20d CVE-2026-672778.2 HIG

74.8%

KEV—72MikroTik RouterOS Missing Authentication for Critical Function Vulnerability35d CVE-2018-14847—

99.9%

KEV—80MikroTik Router OS Directory Traversal Vulnerability—