CVE-2023-30799
CRITICAL EXPLOITED IN THE WILDMikroTik RouterOS < 6.48.7 and 6.34-6.49.7 - Authenticated Privilege Escalation via Winbox or HTTP Interface
Title source: llmExploitation Summary
CVE-2023-30799 has been observed exploited in the wild (reported by VulnCheck KEV, InTheWild.io). EIP tracks 2 public exploits from researchers including alzeer711.
AI-analyzed exploit summary The repository appears to be a writeup or documentation for an exploit kit targeting MikroTik RouterOS 6.49.18, specifically mentioning CVE-2023-30799. However, it lacks actual exploit code or technical details, only providing a summary in Arabic.
Description
MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.
Exploits (2)
The repository appears to be a writeup or documentation for an exploit kit targeting MikroTik RouterOS 6.49.18, specifically mentioning CVE-2023-30799. However, it lacks actual exploit code or technical details, only providing a summary in Arabic.
FOISted is a post-authentication remote jailbreak exploit for MikroTik RouterOS versions 6.34 to 6.49.6, leveraging two vulnerabilities: a privilege escalation to bypass policy restrictions and a function pointer invocation in the FoisHandler to achieve remote code execution via a ROP chain.
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H