CVE-2024-54772 Information

Description

An issue was discovered in the Winbox service of MikroTik RouterOS v6.43 through v7.16.1. A discrepancy in response times between connection attempts made with a valid username and those with an invalid username allows attackers to enumerate for valid accounts.

Reference

https://github.com/deauther890/CVE-2024-54772

CNNVD-202508-1404 (Published: 2025-08-13)

Share on: