Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability
CVE-2023-32154

7.5HIGH

Key Information:

Vendor

Mikrotik

Status
Routeros
Vendor
CVE Published:
3 May 2024

What is CVE-2023-32154?

This vulnerability in Mikrotik RouterOS affects the Router Advertisement Daemon (Radvd), allowing network-adjacent attackers to execute arbitrary code. The flaw arises due to inadequate validation of user-supplied data, leading to a potential write beyond the allocated buffer. Exploitation of this vulnerability does not require user authentication, enabling malicious actors to run code in the context of root privileges. Organizations using Mikrotik RouterOS should take immediate action to secure their systems.

Affected Version(s)

RouterOS 6.49.7 Stable

References

https://www.zerodayinitiative.com/advisories/ZDI-23-710/
x_research-advisory

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.