The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other impacts via a request to download the routers DLLs or plugins, as demonstrated by roteros.dll.
Name | Vendor | Start Version | End Version |
---|---|---|---|
Routeros | Mikrotik | 5.15 (including) | 5.15 (including) |