Vulnerabilities > Mikrotik > Winbox

DATE CVE VULNERABILITY TITLE RISK
2020-04-15 CVE-2020-5721 Insufficiently Protected Credentials vulnerability in Mikrotik Winbox
MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field is set and no Master Password is set.
local
low complexity
mikrotik CWE-522
2.1
2020-02-06 CVE-2020-5720 Path Traversal vulnerability in Mikrotik Winbox 3.18/3.20
MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions.
network
mikrotik CWE-22
4.3
2020-01-14 CVE-2019-3981 Unspecified vulnerability in Mikrotik Routeros and Winbox
MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks.
network
mikrotik
4.3