CVE-2023-30799
MikroTik RouterOS Administrator Privilege Escalation
HIGH 7.2EPSS 1.4%
MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system.
- Affected
- MikroTik · RouterOS
- CVSS v3.1 NVD
- 7.2 HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H - CVSS v3.1 VULNCHECK
- 9.1 CRITICAL
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H - EPSS
- 1.43% chance of exploitation in the next 30 days, 73rd percentile
- Published
- 2023-07-19
- Updated
- 2025-11-21
Proof-of-concept exploits (1)
- MarginResearch/FOISted159★ · 2023-07-29