VYPR
← All advisories
Unrated severityNVD Advisory· Published Jul 19, 2023· Updated Nov 21, 2025

MikroTik RouterOS Administrator Privilege Escalation

CVE-2023-30799

Description

MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Mikrotik/Routerosllm-fuzzy2 versions
    >=6.48.6 <=6.49.6 (long-term fixed in >6.48.6, stable fixed in 6.49.7)+ 1 more
    • (no CPE)range: >=6.48.6 <=6.49.6 (long-term fixed in >6.48.6, stable fixed in 6.49.7)
    • (no CPE)range: 0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.