MikroTik RouterOS before version 7.24 contains an out-of-bounds read vulnerability in its userspace SMB daemon. The flaw arises when processing a minimal SMB1 SessionSetupAndX frame with a specially crafted uniPwdLen field value. This triggers an out-of-bounds read in the SessionSetupAndX handler before any authentication checks, allowing unauthenticated attackers to read memory beyond the intended buffer. This exposure could leak sensitive information from the device's memory.

An unauthenticated attacker can exploit this vulnerability to read memory beyond the intended buffer in the SMB daemon, potentially exposing sensitive information. The vulnerability does not require user interaction or privileges and affects the device before credential validation, increasing risk. However, no known exploits are reported in the wild at this time.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Since no official patch or vendor advisory is provided in the input data, users should monitor MikroTik's official channels for updates and apply any released fixes promptly. Until patched, consider disabling or restricting SMB services if feasible to reduce exposure.