Mikrotik — Vulnerabilities & Security Advisories 11

MikroTik develops network routing and wireless hardware primarily used for internet connectivity and network infrastructure management. Historically, their devices have been vulnerable to multiple remote code execution, cross-site scripting, and privilege escalation flaws, often stemming from default configurations and unpatched services. With 11 CVEs currently on record, notable security characteristics include widespread deployment in small to medium enterprises making them attractive targets. Major incidents include the 2018 VPN hijacking attack where compromised routers were used to mine cryptocurrency, highlighting ongoing security challenges in their ecosystem.