CVE Watch—

CVE-2018-7445

MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

CVSS

—

Sin CVSS

EPSS

60.8%

p99

KEV

SÍ

8 sept 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

60.8%EPSS · 30 días60.8%

2026-09-162026-10-14

Ficha del catálogo KEV

Producto

MikroTik / RouterOS

Vulnerabilidad

MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

Añadido a KEV

8 sept 2022

Remediar antes de

29 sept 2022

Uso conocido en ransomware

Descripción resumida

In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.

Acción requerida

Apply updates per vendor instructions.

Notas

https://www.coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow#vendor_update, https://mikrotik.com/download; https://nvd.nist.gov/vuln/detail/CVE-2018-7445

CVEs relacionados

CVECVSSEPSSKEVRExplotTítuloVis.

CVE-2026-860609.8 CRÍ

93.6%

KEV—78MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability34d CVE-2026-672796.5 MED

62.9%

KEV—69Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability19d CVE-2026-672778.2 ALT

74.7%

KEV—72MikroTik RouterOS Missing Authentication for Critical Function Vulnerability34d CVE-2018-14847—

99.9%

KEV—80MikroTik Router OS Directory Traversal Vulnerability—