Lyrie
Active Exploitation
ACTIVELY EXPLOITED3 sources verified·1 min read
By Lyrie Threat Intelligence·12/1/2021

CVE-2018-14847 added to CISA KEV: MikroTik RouterOS

Status: ✅ Confirmed exploited in the wild

Date added: 2021-12-01

Required action: Apply updates per vendor instructions.

Due date: 2022-06-01

Why this matters

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

Sources

Lyrie Verdict

Lyrie's autonomous detection layer catches active exploitation primitives at machine speed — closing the gap between disclosure and weaponization that traditional defense simply can't cover.