All vulnerabilities

Servers and applications

CVE-2023-32154

Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Mikrotik RouterOS. Authentication is not required to exploit this vulnerability. The specific flaw exists within the Router Advertisement Daemon. The issue results from the lack of proper validation of…

Severity
High 7.5
Published
3 May 2024
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
6.48.7
Sources
NVD

Affected software

SoftwareAffected versions
MikroTik RouterOSServers and applications · cpe:o:mikrotik:routeros
  • Every version before 6.48.7

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2023-32154
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2023-32154