SXT kits Archives - CANADA’S LEADING MIKROTIK SPECIALISTS

MikroTik Newsletter #2018-13, November 29, 2018

Thursday, 29 November 2018 by Hani Rahrouh

Hello, In this newsletter: – new PWR-LINE AP – new wAP, LtAP mini, LHG and SXT kits with R11e-4G LTE card – new metal SOLIDmount – wall mount kit for RB4011 series ======================= We are glad to introduce our PWR-LINE AP product line! The PWR-LINE AP is a wireless access point with a single Ethernet

Published in Blog, RouterBOARDs

No Comments

CVE-2018-19298 CVE-2018-19299 IPv6 resource exhaustion
Summary RouterOS contained several IPv6 related resource exhaustion issues, that have now been fixed, taking care of the above-mentioned CVE entries. The first issue caused the device to reboot if traffic to a lot of different destination addresses was routed. The reboot was caused by watchdog timer since the device was overloaded…
MikroTik accelerates the adoption of 60 GHz technologies with Terragraph
Press Release. 25 February 2019 Riga, Latvia - MikroTik is announcing a collaboration with Facebook to build high-speed connectivity solutions with Terragraph, helping to accelerate the adoption of 60 GHz fixed wireless access technologies to deliver gigabit services and connect more people, faster. The 60 GHz band allows high-speed broadband connectivity…
CVE-2019–3924 Dude agent vulnerability
On February 21, Tenable published a new CVE, describing a vulnerability, which allows to proxy a TCP/UDP request through the routers Winbox port, if it's open to the internet. Tenable had previously contacted MikroTik about this issue, so a fix has already been released on February 11, 2019 in…
CVE-2018-14847 winbox vulnerability
A cybersecurity researcher from Tenable Research has released a new proof-of-concept (PoC) RCE attack for an old directory traversal vulnerability that was found and patched within a day of its discovery in April this year, the new attack method found by Tenable Research exploits the same vulnerability, but takes it to…
Bugfix update 6.40.9 released
We have released a new version in the RouterOS bugfixes-only channel. The bugfixes-only channel is considered the "stable" branch of RouterOS releases and is updated rarely, only when important fixes must be included. This is the most stable and most tested of the RouterOS release channels. !) security - fixed vulnerabilities CVE-2018-1156,…
CVE-2018-115X issues discovered by Tenable
MikroTik was contacted by Tenable Inc. who had discovered several issues in RouterOS web server. The issues only affect authenticated users, meaning, to exploit them, there must be a known username and password on the device. Your data, access to the system and configuration are not under risk. All the below…
WPA2 preshared key brute force attack
It has come to our attention that a new way of brute force attack based on WPA2 standard using PMKID has come to light. This attack actually is a brute force attack on WPA2 preshared key. The reason this attack is considered effective is because it can be performed offline, without…
Web service vulnerability
This post summerizes the facts around the www service vulnerability in RouterOS which was published by Wikileaks as part of the Vault 7 document release. The vulnerability affected the RouterOS webfig configuration interface, if no firewall was put in place to protect it. MikroTik fixed the vulnerability in the…
CVE-2018-14847 winbox vulnerability
This post summarises the Winbox server vulnerability in RouterOS, discovered and fixed in RouterOS on April 23, 2018. Note that although Winbox was used as point of attack, the vulnerabilitty was in RouterOS. This issue was later assigned a universal identifier CVE-2018-14847. How it works: The vulnerability allowed a special tool to…