{"id":"CVE-2018-7445","kind":"vulnerability","aliases":["CVE-2018-7445"],"related":[],"title":"A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages","description":"A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.","summary":"MikroTik RouterOS has a stack-based buffer overflow when it processes NetBIOS session request messages. A remote attacker who can reach the affected service can run code on the router.","severity":"critical","cvss":10.0,"epss":0.60809,"exploited":true,"exploited_at":"2022-09-08T00:00:00+00:00","products":[{"name":"mikrotik routeros","fixed":["6.41.3"],"affected":"< 6.41.3","ecosystem":"vendor"},{"name":"mikrotik routeros","fixed":[],"affected":"= 6.42","ecosystem":"vendor"},{"name":"MikroTik RouterOS","fixed":[],"affected":"","ecosystem":"vendor"}],"ecosystems":["vendor"],"tags":["exploited","infrastructure","mikrotik","network-edge","routeros","self-hosted"],"not_affected_if":["patched-routeros","service-unreachable"],"how_to_check":"Check the RouterOS version with /system resource print and compare it to the fixed release in the vendor advisory; confirm whether the NetBIOS/SMB-related service is reachable from untrusted networks.","fix":"Upgrade RouterOS to a fixed version per the MikroTik vendor instructions (version unknown in sources); block untrusted access to the affected service until patched.","status":"open","published_at":"2018-03-19T21:29:01+00:00","first_seen_at":"2026-10-23T19:11:52+00:00","triaged_at":"2026-10-23T21:10:45+00:00","updated_at":"2026-10-24T00:09:51+00:00","category":"infrastructure","confidence":0.7,"triage":{"at":"2026-10-23T21:10:45Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade RouterOS to a fixed version per the MikroTik vendor instructions (version unknown in sources); block untrusted access to the affected service until patched.","reach":"network","impact":"high","summary":"MikroTik RouterOS has a stack-based buffer overflow when it processes NetBIOS session request messages. A remote attacker who can reach the affected service can run code on the router.","category":"infrastructure","who_cares":["mikrotik","routeros","self-hosted","network-edge"],"confidence":0.7,"needs_auth":"no","worst_case":"Attacker runs code on the router after sending crafted NetBIOS packets.","analyst_note":"Find the fixed RouterOS version and which service (NetBIOS/SMB) must be exposed, from the MikroTik advisory and CISA KEV entry.","how_to_check":"Check the RouterOS version with /system resource print and compare it to the fixed release in the vendor advisory; confirm whether the NetBIOS/SMB-related service is reachable from untrusted networks.","needs_analyst":true,"not_affected_if":["patched-routeros","service-unreachable"],"user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"critical"},"cost_usd":0.0005,"input_tokens":2861,"output_tokens":428,"severity_before":"unknown"},"analyst_status":null,"analyst_note":null,"search":"'-2018':19A,22A '-7445':20A,23A '/6.42rc27':135C '6.41.3':134C 'access':91C 'affect':63B 'architectur':126C 'attack':58B,89C,121C 'authent':110C 'base':46B 'buffer':2A,47B,72C 'code':67B,101C 'cve':18A,21A 'devic':129C 'edg':35B 'execut':102C 'exploit':30B,96C,123C 'found':5A,75C 'gain':100C 'host':39B 'infrastructur':31B 'messag':17A,55B,87C 'mikrotik':8A,24A,26A,28A,32B,40B,78C 'netbio':14A,52B,84C 'network':34B 'network-edg':33B 'occur':108C 'overflow':3A,48B,73C,107C 'place':112C 'possibl':116C 'process':13A,51B,83C 'reach':61B 'remot':57B,88C,120C 'request':16A,54B,86C 'router':70B 'routero':9A,36B,41B,79C,131C 'routeros':25A,27A,29A 'run':66B,130C 'self':38B 'self-host':37B 'servic':11A,64B,81C,94C 'session':15A,53B,85C 'smb':10A,80C 'stack':45B 'stack-bas':44B 'system':105C 'take':111C 'unauthent':119C 'version':133C 'vulner':98C,137C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2018-03-19T21:29:01+00:00","kev":{"dateAdded":"2022-09-08","dueDate":"2022-09-29","requiredAction":"Apply updates per vendor instructions.","knownRansomwareCampaignUse":"Unknown"},"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","cvss_by":"nvd@nist.gov","poc_count":0,"sources":[{"source":"kev","external_id":"CVE-2018-7445","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-7445","severity":null,"published_at":"2022-09-08T00:00:00+00:00","modified_at":null,"first_seen_at":"2026-10-23T19:11:52+00:00","fetched_at":"2026-10-25T17:39:57+00:00","note":null},{"source":"epss","external_id":"CVE-2018-7445","url":"https://api.first.org/data/v1/epss?cve=CVE-2018-7445","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:45+00:00","fetched_at":"2026-10-23T19:13:45+00:00","note":null},{"source":"nvd","external_id":"CVE-2018-7445","url":"https://nvd.nist.gov/vuln/detail/CVE-2018-7445","severity":null,"published_at":"2018-03-19T21:29:01+00:00","modified_at":"2026-06-17T02:03:08+00:00","first_seen_at":"2026-10-23T22:29:04+00:00","fetched_at":"2026-10-23T22:29:04+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}