MikroTik RouterOS CVE-2023-30799: On the Dangers of Public Admin Interfaces
Tags
attack-pattern: Botnet - T1583.005 Botnet - T1584.005 Credentials - T1589.001 Exploits - T1587.004 Exploits - T1588.005 Firmware - T1592.003 Hardware - T1592.001 Malware - T1587.001 Malware - T1588.001 Network Devices - T1584.008 Software - T1592.002 Vulnerabilities - T1588.006 Connection Proxy - T1090 Default Credentials
Show in Graph
Common Information
Type Value
UUID 73be3f64-02f8-44ae-aa16-1fe881dfb59f
Fingerprint 96b8b954cd13718b
Analysis status DONE
Considered CTI value 0
Text language
Published Aug. 7, 2023, 3:16 p.m.
Added to db Aug. 13, 2023, 1:23 a.m.
Last updated Nov. 12, 2024, 10:40 p.m.
Headline MikroTik RouterOS CVE-2023-30799: On the Dangers of Public Admin Interfaces
Title MikroTik RouterOS CVE-2023-30799: On the Dangers of Public Admin Interfaces
Detected Hints/Tags/Attributes 43/1/11
Source URLs
Redirection Url
Details Source https://censys.com/mikrotik-routeros-cve-2023-30799/
URL Provider
Details Provider Source level domain
Details censys.com censys.com
RSS Feed
Details Id Enabled Feed title Url Added to db
Details 77 ✔ Censys https://censys.io/feed 2024-08-30 22:08
Attributes
Details Type #Events CTI Value
Details CVE 19 
cve-2023-30799
Details Domain 38 
vulncheck.com
Details Domain 2 
margin.re
Details Domain 2 
blog.mikrotik.com
Details File 14 
response.html
Details File 1 
cve-2023-30799.html
Details Url 2 
https://vulncheck.com/blog/mikrotik-foisted-revisited
Details Url 1 
https://margin.re/2022/06/pulling-mikrotik-into-the-limelight
Details Url 1 
https://www.darkreading.com/vulnerabilities-threats/up-to-900k-mikrotik-routers-vulnerable-total-takeover
Details Url 1 
https://blog.mikrotik.com/security/cve-2023-30799.html
Details Url 1 
https://arstechnica.com/information-technology/2021/12/300000-mikrotik-routers-are-ticking-security-time-bombs-researchers-say