CVE-2019-15055 - CVE House
Back to Database
Status published Medium CVE-2019-15055

MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles...

Vulnerability Description

MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbitrary files. Attackers can exploit this vulnerability to reset credential storage, which allows them access to the management interface as an administrator without authentication.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2019-15055

Credits & Attribution

No credits recorded in the NVD database.

References

More from mikrotik

View All →
CVE-2022-45313
Mikrotik RouterOs before stable v7.5 was discovered to contain an...
Unknown 0
CVE-2022-36522
Mikrotik RouterOs through stable v6.48.3 was discovered to contain an...
Medium 6.5
CVE-2022-34960
The container package in MikroTik RouterOS 7.4beta4 allows an attacker...
Critical 9.8
CVE-2021-41987
In the SCEP Server of RouterOS in certain Mikrotik products,...
High 8.1
CVE-2021-3014
In MikroTik RouterOS through 2021-01-04, the hotspot login page is...
Medium 6.1

Affected Vendor

Affected Software

routeros
Vulnerable Versions:
0, 6.45

Timeline

Official Publish: August 26th, 2019
Last Modified: August 5th, 2024
Added to House: July 20th, 2026

CVSS Vectors

V3: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.