Test ID:	1.3.6.1.4.1.25623.1.0.142239
Category:	General
Title:	MikroTik RouterOS Directory Traversal Vulnerability (CVE-2019-3943)
Summary:	MikroTik RouterOS is prone to an authenticated directory; traversal vulnerability.
Description:	Summary: MikroTik RouterOS is prone to an authenticated directory traversal vulnerability. Vulnerability Insight: The directory traversal allows an authenticated attacker to access files outside of the sandbox path with mkdir, read and write access. Vulnerability Impact: An authenticated attacker may have read access to the entire filesystem and write access to all locations that aren't marked as read-only. Affected Software/OS: MikroTik RouterOS version 6.42.12 and prior (Long-term release) and 6.43.12 and prior (Stable release). Solution: Update to version 6.43.13 (Long-term release), 6.44 (Stable release) or later. CVSS Score: 7.5 CVSS Vector: AV:N/AC:L/Au:S/C:C/I:P/A:N
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2019-3943 https://www.tenable.com/security/research/tra-2019-16
Copyright	Copyright (C) 2019 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.