CVE-2023-30800 PoC — MikroTik RouterOS Web Interface Heap Corruption

Source

Associated Vulnerability

Title: MikroTik RouterOS Web Interface Heap Corruption (CVE-2023-30800)
Description:The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTTP request. As a result, the web interface crashes and is immediately restarted. The issue was fixed in RouterOS 6.49.10 stable. RouterOS version 7 is not affected.

Description

CVE-2023-30800

Readme

# MikroTik JSProxy Denial of Service (CVE-2023-30800)

This script exploits a denial of service vulnerability (CVE-2023-30800) affecting older versions of MikroTik RouterOS. When executed, it will cause the targeted router to stop responding.

## Affected Versions

This vulnerability is present in older versions of MikroTik RouterOS. Ensure that you are aware of the version you are testing against.

## How to Use

To run the script, follow these steps:

1. Make sure you have Python installed on your machine.
2. Run the script with the following command:

   ```bash
   python CVE-2023-30800.py

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →