Live › vulnerability › CVE-2018-7445
Go to dashboardMikroTik RouterOS has a stack-based buffer overflow when it processes NetBIOS session request messages. A remote attacker who can reach the affected service can run code on the router.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 19:11 UTC, 3h before NVD. All times on this page are UTC.
Apply updates per vendor instructions.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| mikrotik routeros | vendor | < 6.41.3 | 6.41.3 |
| mikrotik routeros | vendor | = 6.42 | – |
| MikroTik RouterOS | vendor | – | – |
Check the RouterOS version with /system resource print and compare it to the fixed release in the vendor advisory; confirm whether the NetBIOS/SMB-related service is reachable from untrusted networks.
Upgrade RouterOS to a fixed version per the MikroTik vendor instructions (version unknown in sources); block untrusted access to the affected service until patched.
Each row is the first time that source carried this signal. The analyst’s rows are its own findings.
A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.
This page as .md · .json · in your agent: get_signal("CVE-2018-7445")
CISA KEV catalog, Creative Commons 0 · EPSS scores by FIRST, used with attribution · NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.