Test ID:	1.3.6.1.4.1.25623.1.0.124147
Category:	Privilege escalation
Title:	MikroTik RouterOS Privilege Escalation Vulnerability (CVE-2022-34960)
Summary:	MikroTik RouterOS is prone to a privilege escalation; vulnerability.
Description:	Summary: MikroTik RouterOS is prone to a privilege escalation vulnerability. Vulnerability Insight: The container package in MikroTik RouterOS allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host. Affected Software/OS: MikroTik RouterOS version 7.4beta4. Solution: Update to version 7.4beta5 or later. CVSS Score: 10.0 CVSS Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2022-34960 https://nns.ee/blog/2022/06/21/routeros-container-rce.html https://nns.ee/blog/2022/08/05/routeros-container-rce.html
Copyright	Copyright (C) 2022 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.