CVE-2022-34960

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

The container package in MikroTik RouterOS 7.4beta4 allows an attacker to create mount points pointing to symbolic links, which resolve to locations on the host device. This allows the attacker to mount any arbitrary file to any location on the host.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-59

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://nns.ee/blog/2022/06/21/routeros-container-rce.htmlBroken Link
https://nns.ee/blog/2022/08/05/routeros-container-rce.htmlExploit, Third Party Advisory
https://nns.ee/blog/2022/06/21/routeros-container-rce.htmlBroken Link
https://nns.ee/blog/2022/08/05/routeros-container-rce.htmlExploit, Third Party Advisory

Timeline

Published: Aug 25, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-349615.4OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the CVE-2022-349625.4OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the CVE-2022-349635.4OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the CVE-2022-349644.8OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain a stored cross-site scripting (XSS) vulnerability via the CVE-2022-349657.2OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an arbitrary file upload vulnerability via the component /CVE-2022-349667.5OpenTeknik LLC OSSN OPEN SOURCE SOCIAL NETWORK v6.3 LTS was discovered to contain an HTML injection vulnerability via the location parameter CVE-2022-349677.5The assertion `stmt->Dbc->FirstStmt' failed in MonetDB Database Server v11.43.13.CVE-2022-349687.5An issue in the fetch_step function in Percona Server for MySQL v8.0.28-19 allows attackers to cause a Denial of Service (DoS) via a SQL que CVE-2022-349697.5PingCAP TiDB v6.1.0 was discovered to contain a NULL pointer dereference.CVE-2022-34975.4A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been classified as problematic. Affected is an unkn CVE-2022-349709.8Crow before 1.0+4 has a heap-based buffer overflow via the function qs_parse in query_string.h. On successful exploitation this vulnerabilit CVE-2022-349718.8An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code v