vendor:
RouterOS
by:
wsxarcher
9.1
CVSS
CRITICAL
Stack Clash
119
CWE
Product Name: RouterOS
Affected Version From: 6.38.4
Affected Version To: 6.38.4
Patch Exists: YES
Related CWE: CVE-2018-14847
CPE: o:mikrotik:routeros
Metasploit:
N/A
Other Scripts:
N/A
Platforms Tested: Windows, Linux, Mac
2020
Mikrotik Chimay Red Stack Clash Exploit
Mikrotik Chimay Red Stack Clash Exploit is a vulnerability in Mikrotik RouterOS that allows an attacker to execute arbitrary code on the target system. The exploit is based on BigNerd95's POC and was tested on RouterOS 6.38.4 (x86). The exploit uses a technique called 'stack clash' which involves overflowing the stack of a thread and then using a ROP chain to execute arbitrary code. The exploit is written in Python and uses the pwntools library to generate the payload.
Mitigation:
The best way to mitigate this vulnerability is to upgrade to the latest version of RouterOS. Additionally, it is recommended to enable ASLR and DEP on the system.