---
id: "CVE-2018-7445"
kind: "vulnerability"
aliases: ["CVE-2018-7445"]
title: "A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages"
severity: "critical"
cvss: 10.0
epss: 0.60809
exploited: true
status: "open"
category: "infrastructure"
products: [{"name": "mikrotik routeros", "fixed": ["6.41.3"], "affected": "< 6.41.3", "ecosystem": "vendor"}, {"name": "mikrotik routeros", "fixed": [], "affected": "= 6.42", "ecosystem": "vendor"}, {"name": "MikroTik RouterOS", "fixed": [], "affected": "", "ecosystem": "vendor"}]
ecosystems: ["vendor"]
tags: ["exploited", "infrastructure", "mikrotik", "network-edge", "routeros", "self-hosted"]
not_affected_if: ["patched-routeros", "service-unreachable"]
published_at: "2018-03-19T21:29:01+00:00"
first_seen_at: "2026-10-23T19:11:52+00:00"
updated_at: "2026-10-24T00:09:51+00:00"
sources: [{"source": "kev", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-7445", "first_seen_at": "2026-10-23T19:11:52+00:00"}, {"source": "epss", "url": "https://api.first.org/data/v1/epss?cve=CVE-2018-7445", "first_seen_at": "2026-10-23T19:13:45+00:00"}, {"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2018-7445", "first_seen_at": "2026-10-23T22:29:04+00:00"}]
---

# A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages

MikroTik RouterOS has a stack-based buffer overflow when it processes NetBIOS session request messages. A remote attacker who can reach the affected service can run code on the router.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:mikrotik routeros affected < 6.41.3 fixed 6.41.3
- vendor:mikrotik routeros affected = 6.42 fixed ?
- vendor:MikroTik RouterOS affected ? fixed ?

## How to check

Check the RouterOS version with /system resource print and compare it to the fixed release in the vendor advisory; confirm whether the NetBIOS/SMB-related service is reachable from untrusted networks.

## Fix

Upgrade RouterOS to a fixed version per the MikroTik vendor instructions (version unknown in sources); block untrusted access to the affected service until patched.

## Timeline

- 2026-10-23T19:11:52+00:00 kev https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2018-7445
- 2026-10-23T19:13:45+00:00 epss https://api.first.org/data/v1/epss?cve=CVE-2018-7445
- 2026-10-23T22:29:04+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2018-7445

## From the sources

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_