What is CVE-2023-30799?

CVE-2023-30799 is a high-severity vulnerability affecting MikroTik RouterOS systems. This security issue allows a remote attacker with admin access to escalate their privileges to super-admin, potentially executing arbitrary code on the system. The vulnerability impacts RouterOS stable versions before 6.49.7 and long-term versions through 6.48.6. Users of these systems should be aware of this vulnerability and take measures to protect their networks.

Who is impacted by this?

The CVE-2023-30799 vulnerability affects users of MikroTik RouterOS, specifically those using stable versions before 6.49.7 and long-term versions through 6.48.6. A remote attacker with admin access can escalate their privileges to super-admin, potentially executing arbitrary code on the system. Users should be aware of this vulnerability and take steps to protect their networks.

What should I do if I’m affected?

If you're affected by the CVE-2023-30799 vulnerability, it's important to take action to protect your network. Follow these simple steps:

1. Update your MikroTik RouterOS to the latest stable version (6.49.7 or later) or the latest long-term version (6.48.8 or later).

2. Regularly check for updates and apply them as needed.

3. Monitor your network for any suspicious activity.

Is this in CISA’s Known Exploited Vulnerabilities Catalog?

CVE-2023-30799 is not listed in CISA's Known Exploited Vulnerabilities Catalog. This privilege escalation issue in MikroTik RouterOS was published on July 19, 2023. Users should update their systems and monitor for suspicious activity to protect their netwoWeakness Enumeration

The weakness enumeration for this vulnerability is categorized as CWE-269, which involves improper privilege management in MikroTik RouterOS.

Learn More

For a comprehensive understanding of this vulnerability, including its description, severity, technical details, and known affected software configurations, refer to the NVD page or the sources listed below.

• NVD - CVE-2023-30799

• VulnCheck Advisories - MikroTik RouterOS Administrator Privilege Escalation