description: MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions. WinBox is vulnerable to this attack if it connects to a malicious endpoint or if an attacker mounts a man in the middle attack.
problem types: Path Traversal File Writing (CWE-22)
affected:
{
product: MikroTik WinBox
vendor: n/a
versions:
status: affected, version: All versions prior to version 3.21
}