description: MikroTik Winbox 3.20 and below is vulnerable to man in the middle attacks. A man in the middle can downgrade the client's authentication protocol and recover the user's username and MD5 hashed password.
problem types: CWE-300
affected:
{
product: WinBox
vendor: MikroTik
versions:
status: affected, version: Winbox 3.20 and below.
}