Mikrotik RouterOS VXLAN Source IP Improper Access Control Vulnerability

An improper access control vulnerability has been identified in Mikrotik RouterOS, specifically in the handling of remote IP addresses during VXLAN traffic processing. This flaw allows remote attackers to bypass access restrictions and gain unauthorized access to internal network resources. The vulnerability arises from a lack of validation of remote IP addresses against configured values before permitting ingress traffic into the internal network. Notably, authentication is not required to exploit this vulnerability.

Impact

Exploitation of this vulnerability could lead to unauthorized access to internal network resources.

Remediation

Users can upgrade to Mikrotik RouterOS version 7.20 to address this vulnerability.