CVE-2025-42611— Improper certificate validation in multiple RouterOS services
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2025-42611
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Improper certificate validation in multiple RouterOS services
Source: NVD (National Vulnerability Database)
Vulnerability Description
RouterOS provides various services that rely on correct verification of client and server certificates to secure confidentiality and integrity of communications. This includes OpenVPN, CAPsMAN, Dot1x (802.1X), among others. The vulnerability lies in shared certificate validation logic which uses the system certificate store that is shared and equally trusted by all system services. This causes confusion of scope, allowing any certificate authority present in the system-wide trust store to be trusted in any context (with some exceptions), allowing partial or full authentication bypass in CAPsMAN, OpenVPN, Dot1X and potentially others.
Source: NVD (National Vulnerability Database)
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
Source: NVD (National Vulnerability Database)
Vulnerability Type
证书验证不恰当
Source: NVD (National Vulnerability Database)
Affected Products
II. Public POCs for CVE-2025-42611
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2025-42611
Please Login to view more intelligence information
- CVE-2025-42611 – Authentication bypass in multiple RouterOS services caused by improper certificate validation - SI CERTthird-party-advisorygovernment-resource
- https://nvd.nist.gov/vuln/detail/CVE-2025-42611
IV. Related Vulnerabilities
Same product: RouterOS
- CVE-2026-7668
MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out- - CVE-2025-10948
MikroTik RouterOS libjson.so print parse_json_element buffer - CVE-2025-6563
Cross-site scripting via dst parameter in RouterOS WiFi hots - CVE-2025-6443
Mikrotik RouterOS VXLAN Source IP Improper Access Control Vu - CVE-2023-32154
Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Exec
Same vendor: Mikrotik
- CVE-2026-7668
MikroTik RouterOS SCEP Endpoint scep.p ASN1_STRING_data out- - CVE-2025-10948
MikroTik RouterOS libjson.so print parse_json_element buffer - CVE-2025-6563
Cross-site scripting via dst parameter in RouterOS WiFi hots - CVE-2025-6443
Mikrotik RouterOS VXLAN Source IP Improper Access Control Vu - CVE-2023-32154
Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Exec
Same weakness: CWE-295
- CVE-2026-42225
GnuTLS backend silently skips certificate chain verification - CVE-2026-5787
Ivanti EPMM证书验证漏洞影响12.6.1.1及更早版本 - CVE-2026-7821
Ivanti EPMM证书验证不当致信息泄露 - CVE-2026-42011
Gnutls: gnutls: security bypass due to incorrect name constr - CVE-2026-40243
Incus OVN TLS verification accepts peer-supplied roots and p
V. Comments for CVE-2025-42611
No comments yet