Exploitation Summary
EIP tracks 2 public exploits for CVE-2024-54772. PoCs published by deauther890, Seven11Eleven.
AI-analyzed exploit summary This repository contains a functional proof-of-concept exploit for CVE-2024-54772, which allows enumeration of valid usernames in MikroTik RouterOS by analyzing response lengths from crafted TCP payloads. The scripts support single username checks and wordlist-based enumeration.
Description
An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18. A discrepancy in response size between connection attempts made with a valid username and those with an invalid username allows attackers to enumerate for valid accounts.
Exploits (2)
This repository contains a functional proof-of-concept exploit for CVE-2024-54772, which allows enumeration of valid usernames in MikroTik RouterOS by analyzing response lengths from crafted TCP payloads. The scripts support single username checks and wordlist-based enumeration.
This Rust PoC exploits CVE-2024-54772 to enumerate valid MikroTik router usernames by sending a crafted TCP payload to port 8291 and analyzing the response length. The payload manipulates the first byte to include the username length and checks for specific response sizes to determine validity.
References (1)
Scores
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N