MikroTrick

Active Exploitation of RouterOS Vulnerabilities Enables Full Control of MikroTik Devices

Attackers are attempting to exploit a chain of two critical vulnerabilities in MikroTik RouterOS to bypass SSH authentication and then obtain full administrative privileges, amid warnings of active attacks against devices exposed to the internet. MikroTik has released security updates, while Poland’s CERT recommended isolating devices suspected of compromise and rebuilding them from trusted configurations.