CVE-2023-41570

MikroTik RouterOS v7.1 to 7.11 was discovered to contain incorrect access control mechanisms in place for the Rest API.

Score

CVSS 3.1 5.3 Medium

Status

Modified - cve@mitre.org

Published

2023-11-14

Last modified

2024-09-03

Weaknesses

CWE-284

Affected products

• Routeros (Mikrotik)

References

• https://www.enricobassetti.it/2023/11/cve-2023-41570-access-control-vulnerability-in-mikrotik-rest-api/