CVE Catalog
CVE-2023-47310
MediumCVSS 6.5Exploitation Probability (EPSS)
Low risk0.21%
11th percentile - higher than 11% of all known CVEs
Summary
A misconfiguration in the default settings of MikroTik RouterOS 7 allows incoming IPv6 UDP traceroute packets. The issue is fixed in version v7.14.
Risk Assessment
The organization may be exposed to unauthorized network scanning by attackers, potentially revealing network topology and facilitating further attacks.
Recommendation
It is recommended to immediately update MikroTik RouterOS to version 7.14 or later to remediate the vulnerability.
Original NVD description (English source)
A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets.