Hackers Exploit New MikroTik RouterOS Flaws to Hijack Routers

Hackers exploit new MikroTik RouterOS flaws to hijack routers

Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet.

MikroTik RouterOS Vulnerabilities Actively Exploited via SSH

Attackers are actively exploiting MikroTik RouterOS flaws for unauthenticated router takeover. Here are the fixes, indicators of compromise, and post-patch checks. Attackers are exploiting MikroTik RouterOS SSH flaws for full router takeover. See fixed versions, attack indicators, and post-update checks.

Hackers exploit RouterOS flaws to hijack MikroTik devices without authentication

Attackers are exploiting a chain of RouterOS vulnerabilities to hijack MikroTik devices with SSH open to the internet, CERT Polska found. CERT Polska, Poland’s national CSIRT team, have discovered six vulnerabilities in RouterOS and coordinated their disclosure with MikroTik. Among the six, two combined let an attacker take full control of a device without authentication, provided the device has SSH accessible from the internet. They named this …