MikroTik Routers Exploited via Unauthenticated SSH Exposure

Attackers are exploiting unauthenticated SSH access on MikroTik routers to gain administrative control, with CERT Polska reporting affected RouterOS versions and recommending urgent security updates. The vulnerability allows full system compromise through exposed management services, requiring immediate patching and configuration reviews.

Attackers are exploiting MikroTik routers with their Secure Shell (SSH) remote-access service, which is reachable from the internet, to gain full administrative control without authentication, according to CERT Polska's attack warning, published on September 5.

Successful attacks date to at least September 2. The Hacker News’s September 6 review of the warning found no victim count or

Read original article