Is CVE-2018-14847 actively exploited?

Yes. CVE-2018-14847 is listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, which means exploitation in the wild has been confirmed.

Can CVE-2018-14847 be exploited remotely?

The attack vector of CVE-2018-14847 has not been classified yet.

What is the CVSS score of CVE-2018-14847?

CVE-2018-14847 has not received a CVSS score yet.

HOME VULNERABILITIESCVE-2018-14847

HIGHCISA KEVIN THE WILD

CVE-2018-14847

Published: December 1, 2021

EPSS:93.64%probability of exploitation in 30 daysPercentile:99.8th

Official Description

MikroTik RouterOS through 6.42 allows unauthenticated remote attackers to read arbitrary files and remote authenticated attackers to write arbitrary files due to a directory traversal vulnerability in the WinBox interface.

NVD Source

CISA KEV Advisory

MikroTik Router OS Directory Traversal Vulnerability

Added to KEV: 2021-12-01Federal patch deadline: 2022-06-01

Required Action (CISA)

Apply updates per vendor instructions.

Risk Analysis

MikroTik RouterOS through version 6.42 contains a directory traversal vulnerability in the WinBox interface. This flaw allows unauthenticated remote attackers to read arbitrary files and authenticated attackers to write arbitrary files. The high EPSS score of 0.93645 indicates a significant likelihood of exploitation, demanding urgent action. This vulnerability is confirmed to be actively exploited, as it is in the KEV.

This vulnerability is actively being exploited in the wild. Unauthenticated attackers can remotely read files, and authenticated attackers can write files via the WinBox interface.

Recommended Action

Update MikroTik RouterOS to a patched version. Restrict access to the WinBox interface and ensure strong authentication is enforced.

Generated by the CTIWATCH analysis pipeline from this CVE's metadata (CVSS, EPSS, KEV status, exploit intelligence). Verify against vendor advisories before acting.

Technical Analysis

CVE-2018-14847 requires local access, meaning attackers must already have a foothold on the target system.

Exploitation requires some privileges, which limits the exposure to scenarios where an attacker has already gained initial access.

CISA has added CVE-2018-14847 to the Known Exploited Vulnerabilities (KEV) catalog, confirming active exploitation in the wild. U.S. federal agencies are required to patch this within the mandated timeframe, and all organizations should treat remediation as urgent.