M
ikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.
References
| Link | Resource |
|---|---|
| https://github.com/MarginResearch/FOISted | Third Party Advisory |
| https://vulncheck.com/advisories/mikrotik-foisted | Third Party Advisory |
| https://github.com/MarginResearch/FOISted | Third Party Advisory |
| https://vulncheck.com/advisories/mikrotik-foisted | Third Party Advisory |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2025, 17:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | (en) MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system. |
21 Nov 2024, 08:00
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.1 |
| References | () https://github.com/MarginResearch/FOISted - Third Party Advisory | |
| References | () https://vulncheck.com/advisories/mikrotik-foisted - Third Party Advisory |
Information
Published : 2023-07-19 15:15
Updated : 2025-11-21 17:15
NVD link : CVE-2023-30799
Mitre link : CVE-2023-30799
CVE.ORG link : CVE-2023-30799
JSON object : View
CWE