CVE-2019-3976

HIGH

MikroTik RouterOS < 6.44.5 and < 6.45.6 - Authenticated Directory Traversal via Upgrade Package Name Field

Title source: llm
STIX 2.1

Description

RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name field. If an authenticated user installs a malicious package then a directory could be created and the developer shell could be enabled.

References (1)

Core 1
Core References
Third Party Advisory x_refsource_misc
https://www.tenable.com/security/research/tra-2019-46

Scores

CVSS v3 8.8
EPSS 0.0174
EPSS Percentile 74.8%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-22 CWE-23
Status published
Products (2)
mikrotik/routeros < 6.44.5
mikrotik/routeros < 6.45.6
Published Oct 29, 2019
Tracked Since Feb 18, 2026