CVE-2019-3981 | BDVDB-2026-128989 Detail

MikroTikWinBox

Description#

MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed password.

Impact#

No impact statement in the source data.

Weaknesses#

CWE-300

References#

https://www.tenable.com/security/research/tra-2020-01

Exploit#

No public exploit known

History#

Version 12020-01-14Record published in the CVE List.
Version 22024-08-04Most recent update recorded in the CVE List.