Attackers chained two RouterOS SSH flaws to gain full admin access on Internet-exposed MikroTik routers before patches shipped.

So, I need to forward my ISP SIP service from a Mikrotik hEX S to all connected devices. The authentication part would be done client side, both on a Computer and a Phone (Zoiper). I extracted the ...

Sara is an open-source tool designed to analyze RouterOS configurations and identify security vulnerabilities on MikroTik hardware. Sara’s main feature is using regular expressions as the primary ...

Six RouterOS vulnerabilities, including an unauthenticated SSH bypass CERT Polska calls MikroTrick, are being used to hijack MikroTik devices.

Hackers are exploiting a chain of two recently disclosed vulnerabilities in MikroTik routers to take control of devices with SSH services exposed to the internet.