Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability

On 10/05/2023 (May 10th, 2023) MikroTik received information about a new vulnerability, which is assigned the ID CVE-2023-32154. The report stated, that vendor (MikroTik) was contacted in December, but we did not find record of such communication. The original report…

The vulnerability allows a remote attacker to compromise vulnerable system.

MikroTik patches a major security defect in its RouterOS product a full five months after it was exploited at Pwn2Own Toronto.