MikroTik RouterOS and SwitchOS WebFig Management Component Arbitrary Code Execution Vulnerability

A vulnerability in MikroTik RouterOS versions through 7.14.2 and SwitchOS versions through 2.18 allows remote attackers to execute arbitrary code via the WebFig management component, which is accessible over HTTP by default. This vulnerability arises because the WebFig interface does not automatically redirect to HTTPS, leaving authentication credentials exposed to interception.

Impact

Exploitation of this vulnerability could lead to unauthorized execution of code on the affected device.

Remediation

Administrators should update to MikroTik RouterOS versions 7.14.3 or later and SwitchOS versions 2.19 or later, where this vulnerability has been addressed.