CVE-2012-6050: MikroTik RouterOS

Medium severity, CVSS 6.4. EPSS: 9.4% chance of exploitation in the next 30 days.

The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll.

Affected products

• MikroTik RouterOS: version 5.15 only

Published 2012-11-27. Last modified 2026-06-16.