CVE-2019-3943 Vulnerability Details

  /     /     /  

CVE-2019-3943 Metadata Quick Info

CVE Published: 10/04/2019 | CVE Updated: 04/08/2024 | CVE Year: 2019
Source: tenable | Vendor: MikroTik | Product: RouterOS
Status : PUBLISHED

---

CVE-2019-3943 Description

MikroTik RouterOS versions Stable 6.43.12 and below, Long-term 6.42.12 and below, and Testing 6.44beta75 and below are vulnerable to an authenticated, remote directory traversal via the HTTP or Winbox interfaces. An authenticated, remote attack can use this vulnerability to read and write files outside of the sandbox directory (/rw/disk).

Metrics

CVSS Version: 3.1 | Base Score: n/a
Vector: n/a

l➤ Exploitability Metrics:
    Attack Vector (AV)*
    Attack Complexity (AC)*
    Privileges Required (PR)*
    User Interaction (UI)*
    Scope (S)*

l➤ Impact Metrics:
    Confidentiality Impact (C)*
    Integrity Impact (I)*
    Availability Impact (A)*

Weakness Enumeration (CWE)

CWE-ID: CWE-23
CWE Name: CWE-23 Path Traversal
Source: MikroTik

Common Attack Pattern Enumeration and Classification (CAPEC)

CAPEC-ID:
CAPEC Description:


Source: NVD (National Vulnerability Database).