CVE-2017-6297 - CVE House
Back to Database
Status published Medium CVE-2017-6297

The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4...

Vulnerability Description

The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and obtaining the L2TP secret.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2017-6297

Credits & Attribution

No credits recorded in the NVD database.

References

More from mikrotik

View All →
CVE-2022-45313
Mikrotik RouterOs before stable v7.5 was discovered to contain an...
Unknown 0
CVE-2022-36522
Mikrotik RouterOs through stable v6.48.3 was discovered to contain an...
Medium 6.5
CVE-2022-34960
The container package in MikroTik RouterOS 7.4beta4 allows an attacker...
Critical 9.8
CVE-2021-41987
In the SCEP Server of RouterOS in certain Mikrotik products,...
High 8.1
CVE-2021-3014
In MikroTik RouterOS through 2021-01-04, the hotspot login page is...
Medium 6.1

Affected Vendor

Affected Software

routeros
Vulnerable Versions:
6.37.4, 6.83.3

Timeline

Official Publish: February 27th, 2017
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.