Skip to content
OpenAdvisories
Unscored CVE-2019-3981 EUVD-2019-13588GHSA-pg5r-4rf5-r7hv

MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication pr…

Published Jan 14, 2020 · Updated Aug 4, 2024 · Assigned by tenable

Description

MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed password.

Affected products

VendorProductAffectedFixed
MikroTik WinBox Winbox 3.20 and below. —

References