Your RSA-2048 keys break in 2030. Find every one of them before attackers do.
CISA KEV·Added 2022-09-08 — agencies required to remediate by 2022-09-29

CVE-2018-7445

CRITICAL

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability…

Published
Mar 19, 2018
Updated
Nov 7, 2025
Affected
0 pkgs
Patched
None yet
Exploits
7 known

EPSS Exploitation Probability

via FIRST.org ↗
87.6%probability of exploitation in next 30 days
Very High Risk99th percentile0.00%
79.2%82.6%86.1%89.5%81.1%87.6%Dec 25Apr 26Jun 26

EPSS (Exploit Prediction Scoring System) is a daily probability model maintained by FIRST.org. It estimates the likelihood a CVE will be exploited in production environments within the next 30 days, derived from real-world threat intelligence signals.

Description

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.

Affected Products

1 product · 13 configurations
OS
routerosmikrotik
< 6.41.3
1 version
6.42
Exploits & PoCs
7

Research use only. For defensive security, authorized penetration testing, and academic research only. Never execute exploit code against systems without explicit written authorization.

EDB-44290remotehardware

MikroTik RouterOS < 6.41.3/6.42rc27 - SMB Buffer Overflow

by CoreLabs · Mar 15, 2018

Frequently Asked Questions

A buffer overflow was found in the MikroTik RouterOS SMB service when processing NetBIOS session request messages. Remote attackers with access to the service can exploit this vulnerability and gain code execution on the system. The overflow occurs before authentication takes place, so it is possible for an unauthenticated remote attacker to exploit it. All architectures and all devices running RouterOS before versions 6.41.3/6.42rc27 are vulnerable.
O3 Security · Impact-Aware SCA

Is CVE-2018-7445 in your stack?

O3 detects CVE-2018-7445 across dependencies and uses function-level reachability to confirm whether the vulnerable code path is actually reachable — not just present. No false positives.