CVE-2018-10066 | BDVDB-2026-99337 Detail

Description#

An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of intercepting client traffic to act as a malicious OpenVPN server. This may allow the attacker to gain access to the client's internal network (for example, at site-to-site tunnels).

Impact#

Weaknesses#

References#

Exploit#

History#

1. Version 12018-04-13Record published in the CVE List.
2. Version 22024-08-05Most recent update recorded in the CVE List.