How many mikrotik routeros CVEs are in CISA KEV?

Yes — 2 of mikrotik routeros's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Which versions of mikrotik routeros are affected?

106 distinct mikrotik routeros versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in mikrotik routeros CVEs?

mikrotik routeros's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-284 (Improper Access Control).

How many critical mikrotik routeros vulnerabilities are there?

mikrotik routeros has 5 critical and 30 high-severity CVEs.

What is the average severity of mikrotik routeros CVEs?

The average CVSS base score across mikrotik routeros's scored CVEs is 7.0.

mikrotik routeros Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: mikrotik routeros vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

mikrotik routeros Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

mikrotik routeros has 88 published CVE records since 2009, of which 2 are in CISA's Known Exploited Vulnerabilities catalog and 48 have a known public exploit. The average CVSS base score across scored CVEs is 7.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting mikrotik routeros, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list. Affected platforms include arm, ccr1009-7g-1c-1s+, ccr1009-7g-1c-1s+pc, ccr1009-7g-1c-pc, ccr1016-12g, ccr1016-12s-1s+.

Severity and exploitation

How the CVSS severity of mikrotik routeros's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical5

High30

Medium52

Low1

In CISA’s Known Exploited Vulnerabilities catalog

2 of mikrotik routeros's CVEs are confirmed exploited in the wild.

Public exploits

48 of mikrotik routeros's CVEs have a known public exploit available.

Affected versions and CVEs

Browse every mikrotik routeros version named in a CVE, then pick one to see only the CVEs that affect it.

Specific versions

6.48.81 CVE
6.49.91 CVE
Long-term 6.42.12 and below1 CVE
Stable 6.43.12 and below1 CVE
Testing 6.44beta75 and below1 CVE

Version ranges

< 6.4714 CVEs
6.44.6 <= v <= 6.44.66 CVEs
<= 6.44.55 CVEs
< 6.40.94 CVEs
< 6.42.74 CVEs
<= 6.45.64 CVEs

Common weakness types

The CWE weakness categories most often found in mikrotik routeros CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many mikrotik routeros CVEs were published each year.

2012

2015

2017

2018

2019

2020

2021

Other mikrotik products

Browse vulnerabilities for other products by mikrotik.

winbox4 CVEs ccr1009-7g-1c-1s+2 CVEs ccr1009-7g-1c-1s+pc2 CVEs ccr1009-7g-1c-pc2 CVEs ccr1016-12g2 CVEs ccr1016-12s-1s+2 CVEs ccr1036-12g-4s2 CVEs ccr1036-12g-4s-em2 CVEs

Frequently asked questions

Common questions about mikrotik routeros vulnerabilities.

How many CVEs does mikrotik routeros have?: mikrotik routeros has 88 published CVE records since 2009.
How many mikrotik routeros CVEs are in CISA KEV?: Yes — 2 of mikrotik routeros's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for mikrotik routeros vulnerabilities?: Yes — 48 of mikrotik routeros's CVEs have a known public exploit.
Which versions of mikrotik routeros are affected?: 106 distinct mikrotik routeros versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in mikrotik routeros CVEs?: mikrotik routeros's CVEs most often map to these CWE weakness types: CWE-787 (Out-of-bounds Write), CWE-125 (Out-of-bounds Read), CWE-119 (Improper Restriction of Operations within the Bounds of a Memory Buffer), CWE-284 (Improper Access Control).
How many critical mikrotik routeros vulnerabilities are there?: mikrotik routeros has 5 critical and 30 high-severity CVEs.
What is the average severity of mikrotik routeros CVEs?: The average CVSS base score across mikrotik routeros's scored CVEs is 7.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track mikrotik routeros vulnerabilities

Monitor new mikrotik routeros vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing