How many mikrotik winbox CVEs are in CISA KEV?

Yes — 1 of mikrotik winbox's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.

Are there public exploits for mikrotik winbox vulnerabilities?

Yes — 1 of mikrotik winbox's CVEs have a known public exploit.

Which versions of mikrotik winbox are affected?

6 distinct mikrotik winbox versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.

What are the most common weakness types in mikrotik winbox CVEs?

mikrotik winbox's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-260 (Password in Configuration File), CWE-300 (Channel Accessible by Non-Endpoint).

What is the average severity of mikrotik winbox CVEs?

The average CVSS base score across mikrotik winbox's scored CVEs is 6.0.

mikrotik winbox Vulnerabilities: CVEs, CISA KEV & Security Advisories

Name: mikrotik winbox vulnerability dataset (CVEs)
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

RadicalNotion.AI

mikrotik winbox Vulnerabilities: CVEs, CISA KEV & Security Advisories

Overview

mikrotik winbox has 4 published CVE records since 2018, of which 1 are in CISA's Known Exploited Vulnerabilities catalog and 1 have a known public exploit. The average CVSS base score across scored CVEs is 6.0.

This page aggregates every publicly disclosed vulnerability (CVE) affecting mikrotik winbox, with a severity breakdown, the affected and patched versions, the most common weakness types, and the full CVE list.

Severity and exploitation

How the CVSS severity of mikrotik winbox's CVEs breaks down, plus how many are exploited in the wild or have public exploit code.

Critical0

High1

Medium2

Low1

In CISA’s Known Exploited Vulnerabilities catalog

One of mikrotik winbox's CVEs is confirmed exploited in the wild.

Public exploits

One of mikrotik winbox's CVEs has a known public exploit available.

Affected versions and CVEs

Browse every mikrotik winbox version named in a CVE, then pick one to see only the CVEs that affect it.

Version ranges

< 3.201 CVE
< 3.211 CVE
<= 3.221 CVE
>= Winbox 3.20 and below.1 CVE

Fixed in

3.201 CVE
3.211 CVE

Find a version

4 CVEs

Sort

Medium vulnerability · 2020-04-15
CVE-2020-5721CWE-260
Medium · CVSS 5.5
EPSS 0.4% (31th pct)2020-04-15
Medium vulnerability · 2020-02-06
CVE-2020-5720
Patch
CWE-22
Medium · CVSS 5.9
EPSS 1.1% (62th pct)2020-02-06
Low vulnerability · 2020-01-14
CVE-2019-3981
Patch
CWE-300
Low · CVSS 3.7
EPSS 1.1% (64th pct)2020-01-14
High vulnerability · 2018-08-02
CVE-2018-14847
CISA KEV
Public exploit
CWE-22
Added to CISA KEV 2021-12-01
High · CVSS 8.7
EPSS 96.1% (100th pct)2018-08-02

Common weakness types

The CWE weakness categories most often found in mikrotik winbox CVEs. Follow any weakness for its full explanation.

Disclosure activity by year

How many mikrotik winbox CVEs were published each year.

2018

2020

Other mikrotik products

Browse vulnerabilities for other products by mikrotik.

routeros88 CVEs ccr1009-7g-1c-1s+2 CVEs ccr1009-7g-1c-1s+pc2 CVEs ccr1009-7g-1c-pc2 CVEs ccr1016-12g2 CVEs ccr1016-12s-1s+2 CVEs ccr1036-12g-4s2 CVEs ccr1036-12g-4s-em2 CVEs

Frequently asked questions

Common questions about mikrotik winbox vulnerabilities.

How many CVEs does mikrotik winbox have?: mikrotik winbox has 4 published CVE records since 2018.
How many mikrotik winbox CVEs are in CISA KEV?: Yes — 1 of mikrotik winbox's CVEs are listed in CISA's Known Exploited Vulnerabilities catalog, confirmed exploited in the wild and carrying a CISA remediation deadline.
Are there public exploits for mikrotik winbox vulnerabilities?: Yes — 1 of mikrotik winbox's CVEs have a known public exploit.
Which versions of mikrotik winbox are affected?: 6 distinct mikrotik winbox versions are named across its CVEs. Use the version filter above to see the CVEs affecting a specific version.
What are the most common weakness types in mikrotik winbox CVEs?: mikrotik winbox's CVEs most often map to these CWE weakness types: CWE-22 (Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')), CWE-260 (Password in Configuration File), CWE-300 (Channel Accessible by Non-Endpoint).
What is the average severity of mikrotik winbox CVEs?: The average CVSS base score across mikrotik winbox's scored CVEs is 6.0.

References

Vulnerability data is sourced from the CVE Program; severity, KEV, and exploit signals are aggregated by RadicalNotion.AI.

Track mikrotik winbox vulnerabilities

Monitor new mikrotik winbox vulnerabilities as they are disclosed, with AI-written analysis and remediation guidance.

Start free See pricing