Mikrotik Winbox
3 CVEs affecting Mikrotik Winbox. Latest disclosed: 2020-04-15. Critical: 0, High: 0.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-5720 | Medium | 5.9 | 2020-02-06 | MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions. Win… |
CVE-2020-5721 | Medium | 5.5 | 2020-04-15 | MikroTik WinBox 3.22 and below stores the user's cleartext password in the settings.cfg.viw configuration file when the Keep Password field is set and no Maste… |
CVE-2019-3981 | Low | 3.7 | 2020-01-14 | MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover t… |