CVE-2018-14847 MikroTik Router OS Directory Traversal
Unauthenticated attackers can read arbitrary files, while authenticated users can write files via directory traversal in the WinBox interface.
- Exploited in the wild
- Since 1 Dec 2021
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2018-14847?
CVE-2018-14847 is a critical path traversal vulnerability in Mikrotik Routeros, published on 2 Aug 2018. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.
Weakness: CWE-22
Which versions are affected by CVE-2018-14847?
It affects 1 product.
Products include Mikrotik Routeros.
How do I fix CVE-2018-14847?
No fix has been published for CVE-2018-14847 yet. Limit exposure of the affected software until one is available. US federal agencies must fix it by 1 Jun 2022.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2018-14847 being exploited?
Yes. Attackers have exploited CVE-2018-14847 in the wild since at least 1 Dec 2021.
Public exploit code: 1 Metasploit module, 1 Exploit-DB entry and 14 proofs of concept on GitHub.
Other vulnerabilities in Mikrotik Routeros
- CVE-2018-7445 MikroTik RouterOS Stack-Based Buffer Overflow
- CVE-2026-86060 MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command
- CVE-2026-67277 MikroTik RouterOS Missing Authentication for Critical Function
- CVE-2026-67279 Mikrotik RouterOS Improper Enforcement of Behavioral Workflow
- CVE-2017-20149 Memory corruption in n/a
Sources
Also known as GHSA-j583-4cfp-xf9m.