Mmastodon TechnologyCybersecurity first seen 1 d ago, last 1 d ago, peak #11

MikroTik RouterOS stores credentials in plaintext, researchers confirm

Original: Tested in the lab: CVE-2025-56566: Plaintext credentials in the flash of RouterOS 7.19.4 and 7.24.5 We have verified tha

Security researchers say they have verified CVE-2025-56566 in lab tests: RouterOS versions 7.19.4 and 7.24.5 store credentials for external services such as SMTP and PPP, along with DHCP lease data, in plaintext within the non-volatile flash memory of MikroTik devices. The finding raises concerns that anyone with physical access or flash dumps could extract sensitive credentials from affected routers.

Why now: A newly assigned CVE in widely used MikroTik routers has been independently confirmed, prompting admins to check their devices.

MikroTikRouterOSCVE-2025-56566

Open on mastodon →

Evidence

• Tested in the lab: CVE-2025-56566: Plaintext credentials in the flash of RouterOS 7.19.4 and 7.24.5 We have verified that credentials for external services (SMTP, PPP) and DHCP leases are stored in plaintext in the non-volatile memory of MikroTik devices. The vulnerability… · gianni@mikrotikdojo.com · 1

API: https://socialmediatrends-api.osmike.com/v1/trends/4242237