CVE Watch—

CVE-2018-7445

MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

CVSS

—

Sem CVSS

EPSS

65.8%

p99

KEV

SIM

8 de set. de 2022

Exploit Today

0-100

Publicado: — · Última mod.: —

EPSS · 30d

60.8%EPSS · 30 dias65.8%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

MikroTik / RouterOS

Vulnerabilidade

MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability

Adicionado ao KEV

8 de set. de 2022

Corrigir até

29 de set. de 2022

Uso conhecido em ransomware

Não

Descrição resumida

In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.

Ação necessária

Apply updates per vendor instructions.

Notas

https://www.coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow#vendor_update, https://mikrotik.com/download; https://nvd.nist.gov/vuln/detail/CVE-2018-7445

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-860609.8 CRÍ

93.7%

KEV—78MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability56d CVE-2026-672796.5 MÉD

83.2%

KEV—75Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability41d CVE-2026-672778.2 ALT

75.3%

KEV—73MikroTik RouterOS Missing Authentication for Critical Function Vulnerability56d CVE-2018-14847—

99.9%

KEV—80MikroTik Router OS Directory Traversal Vulnerability—