CVE-2018-7445
MikroTik RouterOS
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
What it is
In MikroTik RouterOS, a stack-based buffer overflow occurs when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system.
What to do
Apply updates per vendor instructions.
Vendor notices and references
- www.coresecurity.com/core-labs/advisories/mikrotik-routeros-smb-buffer-overflow#vendor_upd
- nvd.nist.gov/vuln/detail/CVE-2018-7445
Description and required action as published by CISA. Full record at NVD.
Other MikroTik entries on the list
- RouterOS Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability CVE-2026-67279 · Sep 25, 2026
- RouterOS MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability CVE-2026-86060 · Sep 10, 2026
- RouterOS MikroTik RouterOS Missing Authentication for Critical Function Vulnerability CVE-2026-67277 · Sep 10, 2026
- RouterOS MikroTik Router OS Directory Traversal Vulnerability CVE-2018-14847 · Dec 1, 2021