DNS cache poisoning vulnerability

28th Oct, 2019 | Security

Tenable has identified a vulnerability in RouterOS DNS implementation. RouterOS 6.45.6 and below is vulnerable to unauthenticated remote DNS cache poisoning via Winbox. The router is impacted even when DNS is not enabled.

One possible attack vector is via Winbox on port 8291 if this port is open to untrusted… Full story

Package validation and upgrade vulnerability

28th Oct, 2019 | Security

Tenable has identified a couple of issues with RouterOS packaging and upgrade systems. The upgrade system used by RouterOS 6.45.5 and below is vulnerable to man in the middle attacks and insufficient package validation. An attacker can abuse these vulnerabilities to downgrade a router's installed RouterOS version, possibly lock the… Full story

DNS cache poisoning vulnerability

Package validation and upgrade vulnerability

Latest articles

Categories

Archive

Social networks