CVE-2020-5720: MikroTik Winbox

Medium severity, CVSS 5.9. EPSS: 1.1% chance of exploitation in the next 30 days.

MikroTik WinBox before 3.21 is vulnerable to a path traversal vulnerability that allows creation of arbitrary files wherevere WinBox has write permissions. WinBox is vulnerable to this attack if it connects to a malicious endpoint or if an attacker mounts a man in the middle attack.

Affected products

• MikroTik Winbox: before 3.21 (fixed in 3.21)

Published 2020-02-06. Last modified 2026-06-17.