Vulnerabilities (CVE)

Filtered by vendor Mikrotik Subscribe
Filtered by product Routeros
Total 81 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-10066 1 Mikrotik 1 Routeros 2024-11-21 6.8 MEDIUM 8.1 HIGH
An issue was discovered in MikroTik RouterOS 6.41.4. Missing OpenVPN server certificate verification allows a remote unauthenticated attacker capable of intercepting client traffic to act as a malicious OpenVPN server. This may allow the attacker to gain access to the client's internal network (for example, at site-to-site tunnels).