CVE-2025-61481

Published Oct 27, 2025

Last updated 8 hours ago

Overview

AI description

Automated description summarized from trusted sources.

CVE-2025-61481 affects MikroTik RouterOS (v7.14.2) and SwitchOS (v2.18). It allows a remote attacker to execute arbitrary code or intercept credentials via the HTTP-only WebFig management component. The WebFig management interface is initialized with HTTP enabled by default, without automatic redirection to HTTPS. To exploit this vulnerability, an attacker needs network-level access, such as connecting to the same LAN or Wi-Fi network as the targeted device. No authentication is required to capture credentials during the administrator's login. An attacker could harvest credentials and inject malicious configurations or firmware.

Description: An issue in MikroTik RouterOS v.7.14.2 and SwitchOS v.2.18 allows a remote attacker to execute arbitrary code via the HTTP- only WebFig management component
Source: cve@mitre.org
NVD status: Awaiting Analysis

Risk scores

CVSS 3.1

Type: Secondary
Base score: 10
Impact score: 6
Exploitability score: 3.9
Vector string: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:L
Severity: CRITICAL

Weaknesses

134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-200

Hype score is a measure of social media activity compared against trending CVEs from the past 12 months. Max score 100.

Hype score: 29

References