{"cvss":9.1,"datePublished":"2021-12-01","dateUpdated":"2021-12-01","description":"MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.","dueDate":"2022-06-01","id":"CVE-2018-14847","kev_catalogs":["cisa"],"knownRansomwareCampaignUse":"Unknown","notes":"https://nvd.nist.gov/vuln/detail/CVE-2018-14847","product":"RouterOS","requiredAction":"Apply updates per vendor instructions.","severity":"CRITICAL","source":"cisa_known_exploited","title":"MikroTik Router OS Directory Traversal Vulnerability","vendor":"MikroTik"}