CVE-2018-7445VulnerabilityPublished 09/08/2022Updated 10/24/2026
CVE-2018-7445: MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
Affects MikroTik RouterOSSource CISA KEV
Severity
HighNo CVSS score published yet
- Exploitation
Actively exploited – in CISA KEV since 09/08/2022
- KEV deadline
- 09/29/2022
- EPSS
- 60.8% chance of exploitation in 30 days – higher than 99% of CVEs
What to do
CISA required action
Apply updates per vendor instructions.
Description
In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.