← All advisories

Medium severity6.1NVD Advisory· Published Jan 4, 2021· Updated Jun 17, 2026

CVE-2021-3014

CVE-2021-3014

Description

In MikroTik RouterOS through 2021-01-04, the hotspot login page is vulnerable to reflected XSS via the target parameter.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

3

Mikrotik/Routeros3 versions
cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*+ 2 more
- cpe:2.3:o:mikrotik:routeros:*:*:*:*:*:*:*:*range: <=2021-01-04
- (no CPE)range: through 2021-01-04
- (no CPE)

Patches

Vulnerability mechanics

References

2

github.com/M4DM0e/m4dm0e.github.io/blob/gh-pages/_posts/2021-01-04-mikrotik-xss-reflected.mdnvdExploitThird Party Advisory
m4dm0e.github.io/2021/01/04/mikrotik-xss-reflected.htmlnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.