Mikrotik 6.47.10 Exploit -

RouterOS 6.47.10 had SMB sharing enabled by default in some configuration presets. A buffer overflow in the SMB service allowed remote code execution (RCE). An attacker only needed to send a malformed SMB negotiation request to crash the service and potentially gain a reverse shell.

Q: What is the Mikrotik 6.47.10 exploit? A: The Mikrotik 6.47.10 exploit is a remote code execution vulnerability in Mikrotik's RouterOS version 6.47.10. mikrotik 6.47.10 exploit

: If a router had the SCEP server enabled and exposed to the internet, an unauthenticated attacker could potentially execute remote code (RCE) just by knowing the scep_server_name . RouterOS 6

If not used, disable SCEP servers: /certificate scep-server remove [find] . mikrotik 6.47.10 exploit