{"uuid": "576ed39c-95be-4488-8a48-16793dd2559f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2018-14847", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/mikrotik_winbox_fileread.py", "content": "{\"actions\": [], \"aliases\": [], \"arch\": \"\", \"author\": [\"mosajjal\", \"h00die\"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"MikroTik RouterOS (bugfix) 6.30.1-6.40.7, (current) 6.29-6.42, (RC) 6.29rc1-6.43rc3 allows unauthenticated\\n        remote attackers to read arbitrary files through a directory traversal through the WinBox interface\\n        (typically port 8291).\", \"disclosure_date\": \"2018-08-02\", \"fullname\": \"auxiliary/gather/mikrotik_winbox_fileread\", \"is_install_path\": true, \"mod_time\": \"2024-01-07 15:02:53 +0000\", \"name\": \"Mikrotik Winbox Arbitrary File Read\", \"needs_cleanup\": false, \"notes\": {}, \"path\": \"/modules/auxiliary/gather/mikrotik_winbox_fileread.py\", \"platform\": \"\", \"post_auth\": false, \"rank\": 300, \"ref_name\": \"gather/mikrotik_winbox_fileread\", \"references\": [\"URL-https://github.com/BasuCert/WinboxPoC\", \"URL-https://blog.n0p.me/2018/05/2018-05-21-winbox-bug-dissection/\", \"URL-https://blog.mikrotik.com/security/winbox-vulnerability.html\", \"CVE-2018-14847\", \"EDB-45578\"], \"rport\": 8291, \"session_types\": false, \"targets\": null, \"type\": \"auxiliary\"}", "creation_timestamp": "2026-09-08T06:47:18.965744Z"}