CVE-2022-45315: MikroTik RouterOS

Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days.

Mikrotik RouterOs before stable v7.6 was discovered to contain an out-of-bounds read in the snmp process. This vulnerability allows authenticated attackers to execute arbitrary code via a crafted packet.

Affected products

• MikroTik RouterOS: before 7.6 (fixed in 7.6)

Published 2022-12-05. Last modified 2026-06-17.