CVE-2024-54772 PoC — MikroTik RouterOS 安全漏洞

Source

https://github.com/Seven11Eleven/CVE-2024-54772

Associated Vulnerability

Title: MikroTik RouterOS 安全漏洞 (CVE-2024-54772)
Description:An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18. A discrepancy in response size between connection attempts made with a valid username and those with an invalid username allows attackers to enumerate for valid accounts.

Readme

# [CVE-2024-54772 implemented in Rust](https://nvd.nist.gov/vuln/detail/CVE-2024-54772)

## this vulnerability allows to enumerate valid mikrotik router usernames

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →