{"id":183289,"date":"2026-09-07T22:54:33","date_gmt":"2026-09-07T20:54:33","guid":{"rendered":"https:\/\/prohoster.info\/blog\/news\/uyazvimosti-v-mikrotik-routeros-dopuskayushhie-udalyonnyj-dostup-po-ssh-bez-autentifikaczii"},"modified":"2026-09-07T22:54:37","modified_gmt":"2026-09-07T20:54:37","slug":"mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/news\/mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","title":{"rendered":"MikroTik RouterOSi haavat, mis v\u00f5imaldavad kaugjuurdep\u00e4\u00e4su SSH kaudu ilma autentimiseta","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

MikroTiki ruuterite kasutatavates RouterOS-i operatsioonis\u00fcsteemides avastati 6 haavatavust. Kaks neist koos v\u00f5imaldavad kaugjuhtimisega t\u00e4ielikku kontrolli seadme \u00fcle administraatori \u00f5igustega, eeldusel, et see on SSH kaudu saadaval. On registreeritud haavatavuste kuritarvitamise juhtumeid. Mikroticki plaastrid on saadaval alates 3. septembrist (RouterOS 7.25 beta 3, 7.24.2, 7.23.4, 6.49.21) ja on t\u00f5en\u00e4oline, et r\u00fcndajad suudavad nende plaastrite p\u00f5hjal tuvastada haavatavuste olemust. <\/p>\n

CVE-2026-67276 ja CVE-2026-86060 haavatustele on m\u00e4\u00e4ratud kriitiline ohu tase (9.2 skaalal 10). Esimene probleem tuleneb vale RSA avalike v\u00f5tmete kontrollimisest, mida kasutatakse SSH kaudu autentimisel. Teades kasutajanime ja kasutaja avaliku v\u00f5tme parameetreid, v\u00f5ib r\u00fcndaja luua vale v\u00f5tme ja siseneda selle kaudu SSH-sse, ilma et tal oleks juurdep\u00e4\u00e4s privaatavale v\u00f5tmele. Teine probleem on seotud lubamatute m\u00e4rkide filtreerimise puudumisega kasutajanime alguses SSH kaudu sisselogimise t\u00f6\u00f6tlemisel. <\/p>\n

Haavatavuste eduka kuritarvitamise j\u00e4lgimine on v\u00f5imalik RouterOS-i logi kirjeid j\u00e4lgides: login failure for user -2 from via ssh user added by ssh:-2@
\n
Allikas: opennet.ru<\/a> <\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"

\u0412 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 RouterOS, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 MikroTik, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041a\u043e\u043c\u0431\u0438\u043d\u0430\u0446\u0438\u044f \u0434\u0432\u0443\u0445 \u0438\u0437 \u043d\u0438\u0445 \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e \u043f\u043e\u043b\u0443\u0447\u0438\u0442\u044c \u043f\u043e\u043b\u043d\u044b\u0439 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c \u043d\u0430\u0434 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u043f\u0440\u0438 \u0443\u0441\u043b\u043e\u0432\u0438\u0438 \u0435\u0433\u043e \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u043e\u0441\u0442\u0438 \u043f\u043e SSH. \u0417\u0430\u0444\u0438\u043a\u0441\u0438\u0440\u043e\u0432\u0430\u043d\u044b \u0444\u0430\u043a\u0442\u044b \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043e\u0442\u043c\u0435\u0447\u0435\u043d\u043d\u044b\u0445 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439. \u041f\u0430\u0442\u0447\u0438 \u043e\u0442 Mikrotick \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b \u0441 3 \u0441\u0435\u043d\u0442\u044f\u0431\u0440\u044f (RouterOS 7.25 beta 3, 7.24.2, 7.23.4, 6.49.21) \u0438 \u0432\u0435\u0440\u043e\u044f\u0442\u043d\u043e \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0435 \u0441\u043c\u043e\u0433\u043b\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0438\u0442\u044c […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":10,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[702],"tags":[],"class_list":["post-183289","post","type-post","status-publish","format-standard","hentry","category-news"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47MikroTiki RouterOS-i haavatavused, mis v\u00f5imaldavad kaugjuurdep\u00e4\u00e4su SSH kaudu ilma autentimiseta | ProHoster","description":"MikroTiki ruuterite kasutatavates RouterOS-i operatsioonis\u00fcsteemides avastati 6 haavatavust.","canonical_url":"https:\/\/prohoster.info\/et\/blog\/news\/mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 MikroTik RouterOS, \u0434\u043e\u043f\u0443\u0441\u043a\u0430\u044e\u0449\u0438\u0435 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 \u0434\u043e\u0441\u0442\u0443\u043f \u043f\u043e SSH \u0431\u0435\u0437 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 | ProHoster","og:description":"\u0412 \u043e\u043f\u0435\u0440\u0430\u0446\u0438\u043e\u043d\u043d\u043e\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u0435 RouterOS, \u043f\u0440\u0438\u043c\u0435\u043d\u044f\u0435\u043c\u043e\u0439 \u0432 \u043c\u0430\u0440\u0448\u0440\u0443\u0442\u0438\u0437\u0430\u0442\u043e\u0440\u0430\u0445 MikroTik, \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u043e 6 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439.","og:url":"https:\/\/prohoster.info\/et\/blog\/news\/mikrotik-routeros-vulnerabilities-allow-unauthenticated-remote-ssh-access","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2026-09-07T20:54:33+00:00","article:modified_time":"2026-09-07T20:54:37+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":[],"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/183289","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/10"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=183289"}],"version-history":[{"count":1,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/183289\/revisions"}],"predecessor-version":[{"id":183290,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/183289\/revisions\/183290"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=183289"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=183289"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=183289"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}