Medium severity6.5NVD Advisory· Published Aug 26, 2019· Updated Jun 17, 2026

CVE-2019-15055

Description

MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbitrary files. Attackers can exploit this vulnerability to reset credential storage, which allows them access to the management interface as an administrator without authentication.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Mikrotik/Routeros2 versions
cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*range: <=6.44.5
- (no CPE)range: <=6.44.5, <=6.45.3
MikroTik/RouterOSdescription

Patches

Vulnerability mechanics

References

github.com/tenable/routeros/tree/master/poc/cve_2019_15055nvdExploitThird Party Advisory
fortiguard.com/zeroday/FG-VD-19-108nvdThird Party Advisory
medium.com/tenable-techblog/rooting-routeros-with-a-usb-drive-16d7b8665f90nvdPress/Media CoverageThird Party Advisory
mikrotik.com/download/changelogs/testing-release-treenvdRelease NotesVendor Advisory
forum.mikrotik.com/viewtopic.phpnvd

News mentions

No linked articles in our index yet.

cvss	0.423
epss	0.002
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000