Common Weakness Enumeration
CWE-1174
AllowedASP.NET Misconfiguration: Improper Model Validation
Abstraction: Variant · Status: Draft
The ASP.NET application does not use, or incorrectly uses, the model validation framework.
1 vulnerability references this CWE, most recent first.
GHSA-CMHX-WRHM-RJ89
Vulnerability from github – Published: 2025-06-30 15:30 – Updated: 2025-06-30 21:30
VLAI
Details
A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets.
Severity
6.5 (Medium)
{
"affected": [],
"aliases": [
"CVE-2023-47310"
],
"database_specific": {
"cwe_ids": [
"CWE-1174"
],
"github_reviewed": false,
"github_reviewed_at": null,
"nvd_published_at": "2025-06-30T15:15:22Z",
"severity": "MODERATE"
},
"details": "A misconfiguration in the default settings of MikroTik RouterOS 7 and fixed in v7.14 allows incoming IPv6 UDP traceroute packets.",
"id": "GHSA-cmhx-wrhm-rj89",
"modified": "2025-06-30T21:30:50Z",
"published": "2025-06-30T15:30:38Z",
"references": [
{
"type": "ADVISORY",
"url": "https://nvd.nist.gov/vuln/detail/CVE-2023-47310"
},
{
"type": "WEB",
"url": "https://forum.mikrotik.com/t/fixed-in-7-14-security-vulnerability-default-configuration-firewall-bypass-for-ipv6-udp/262186"
},
{
"type": "WEB",
"url": "http://mikrotik.com"
},
{
"type": "WEB",
"url": "http://routeros.com"
}
],
"schema_version": "1.4.0",
"severity": [
{
"score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N",
"type": "CVSS_V3"
}
]
}
No mitigation information available for this CWE.
No CAPEC attack patterns related to this CWE.