Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The L2TP Client in MikroTik RouterOS versions 6.83.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and obtaining the L2TP secret.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
MikroTik RouterOS L2TP Client 安全漏洞
Vulnerability Description
MikroTik RouterOS是拉脱维亚MikroTik公司的一套基于Linux核心开发的路由操作系统。该系统可将PC电脑变成专业路由器。L2TP Client是其中的一个通信协议客户端。 MikroTik RouterOS 6.83.3版本和6.37.4版本中的L2TP Client存在安全漏洞。攻击者可利用该漏洞实施中间人攻击，获取L2TP服务器的网络访问权限。
CVSS Information
N/A
Vulnerability Type
N/A