{"vulnerability": "cve-2018-1156", "sightings": [{"uuid": "278145f8-f469-42f1-a9d4-e18832c76b7c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-1156", "type": "seen", "source": "https://t.me/mikrotikninja/245", "content": "\u0412\u044b\u0448\u043b\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 RouterOS 6.42.7, \u0432 \u043a\u043e\u0442\u043e\u0440\u043e\u043c \u043f\u043e\u043c\u0438\u043c\u043e \u043f\u0440\u043e\u0447\u0438\u0445 \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u0439 \u0437\u0430\u043a\u0440\u044b\u043b\u0438 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439: CVE-2018-1156, CVE-2018-1157, CVE-2018-1158, CVE-2018-1159\n\n\u041a\u0430\u0447\u0430\u0442\u044c \u0442\u0443\u0442: https://mikrotik.com/download\n\n\u041f\u0440\u043e\u0447\u0438\u0435 \u043d\u043e\u0432\u043e\u0432\u0432\u0435\u0434\u0435\u043d\u0438\u044f \u043a\u043e\u0441\u043d\u0443\u043b\u0438\u0441\u044c:\n - \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0435 \u0440\u0430\u0431\u043e\u0442\u044b \u043a\u043e\u043c\u043c\u0443\u0442\u0430\u0442\u043e\u0440\u043e\u0432 \u0441\u0435\u0440\u0438\u0438 CRS3XX\n - 60 GHZ\n - LTE\n - \u043c\u043d\u043e\u0433\u043e \u0443\u043b\u0443\u0447\u0448\u0435\u043d\u0438\u0439 \u0434\u043b\u044f \u0430\u0440\u0445\u0438\u0442\u0435\u043a\u0442\u0443\u0440\u044b ARM\n \n\u041f\u043e\u043b\u043d\u044b\u0439 \u0441\u043f\u0438\u0441\u043e\u043a \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439:\n\nMAJOR CHANGES IN v6.42.7:\n----------------------\n!) security - fixed vulnerabilities CVE-2018-1156, CVE-2018-1157, CVE-2018-1158, CVE-2018-1159;\n----------------------\n\n*) bridge - improved bridge port state changing process;\n*) crs326/crs328 - fixed untagged packet forwarding through tagged ports when pvid=1; \n*) crs3xx - added command that forces fan detection on fan-equipped devices; \n*) crs3xx - fixed port disable on CRS326 and CRS328 devices; \n*) crs3xx - fixed tagged packet forwarding without VLAN filtering (introduced in 6.42.6);\n*) crs3xx - fixed VLAN filtering when there is no tagged interface specified; \n*) dhcpv4-relay - fixed false invalid flag presence;\n*) dhcpv6-client - allow to set \"default-route-distance\";\n*) dhcpv6 - improved reliability on IPv6 DHCP services; \n*) dhcpv6-server - properly update interface for dynamic DHCPv6 servers;\n*) ethernet - improved large packet handling on ARM devices with wireless;\n*) ethernet - removed obsolete slave flag from \"/interface vlan\" menu;\n*) ipsec - fixed \"sa-src-address\" deduction from \"src-address\" in tunnel mode;\n*) ipsec - improved invalid policy handling when a valid policy is uninstalled; \n*) ldp - properly load LDP configuration; \n*) led - fixed default LED configuration for RBLHGG-5acD-XL devices; \n*) lte - added signal readings under \"/interface lte scan\" for 3G and GSM modes; \n*) lte - fixed memory leak on USB disconnect; \n*) lte - fixed SMS send feature when not in LTE network;\n*) package - do not allow to install out of bundle package if it already exists within bundle;\n*) ppp - fixed interface enabling after a while if none of them where active;\n*) sfp - hide \"sfp-wavelength\" parameter for RJ45 transceivers; \n*) tr069-client - fixed unresponsive tr069 service when blackhole route is present;\n*) upgrade - fixed RouterOS upgrade process from RouterOS v5; \n*) userman - fixed compatibility with PayPal TLS 1.2;\n*) vrrp - fixed VRRP packet processing on VirtualBox and VMWare hypervisors;\n*) w60g - added distance measurement feature;\n*) w60g - fixed random disconnects;\n*) w60g - general stability and performance improvements;\n*) w60g - improved MCS rate detection process;\n*) w60g - improved MTU change handling;\n*) w60g - properly close connection with station on disconnect;\n*) w60g - stop doing distance measurements after first successful measurement;\n*) winbox - added \"secondary-channel\" setting to wireless interface if 80 MHz mode is selected;\n*) winbox - fixed \"sfp-connector-type\" value presence under \"Interface/Ethernet\";\n*) winbox - fixed warning presence for \"IP/IPsec/Peers\" menu;\n*) winbox - properly display all flags for bridge host entries;\n*) winbox - show \"System/RouterBOARD/Mode Button\" on devices that has such feature;\n*) wireless - added option to disable PMKID for WPA2;\n*) wireless - fixed memory leak when performing wireless scan on ARM;\n*) wireless - fixed packet processing after removing wireless interface from CAP settings; \n*) wireless - updated \"united-states\" regulatory domain information;", "creation_timestamp": "2018-08-23T06:17:37.000000Z"}, {"uuid": "d1d2c0e7-e15d-4eb4-9d78-e806b5b08004", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2018-1156", "type": "seen", "source": "https://t.me/GithubRedTeam/88597", "content": "", "creation_timestamp": "2026-07-14T00:00:42.623913Z"}, {"uuid": "b37eadf0-3f6d-4838-a94d-f2d973d45b62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-1156", "type": "seen", "source": "https://t.me/mtikpro/97", "content": "\u0412\u044b\u0448\u043b\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0435 RouterOS\n\u0432\u0435\u0442\u043a\u0430 bugfix: 6.40.9\n\u0432\u0435\u0442\u043a\u0430 current: 6.42.7\n\u0412 \u043d\u043e\u0432\u044b\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 \u0437\u0430\u043a\u0440\u044b\u0442\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438: CVE-2018-1156, CVE-2018-1157, CVE-2018-1158, CVE-2018-1159.\n\n\u0415\u0449\u0451 \u043c\u043e\u0436\u043d\u043e \u043e\u0431\u043d\u043e\u0432\u043b\u044f\u0442\u044c \u0441\u0432\u043e\u0438 \"\u0431\u043e\u0435\u0432\u044b\u0435\" \u0440\u043e\u0443\u0442\u0435\u0440\u044b \u0431\u0435\u0437 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0431\u043e\u043b\u044c\u0448\u0435\u0439 \u0447\u0430\u0441\u0442\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438, \u0442\u0430\u043a \u043a\u0430\u043a \u043d\u043e\u0432\u0430\u044f \u0432\u0435\u0440\u0441\u0438\u044f bugfix \u0435\u0449\u0451 \u043d\u0435 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u043d\u043e\u0432\u0443\u044e \u0440\u0435\u0430\u043b\u0438\u0437\u0430\u0446\u0438\u044e bridge (\u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0441 RouterOS 6.41).\n\n\u0418\u0437 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0439:\n*) filesystem - \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0441 \u043f\u0430\u043c\u044f\u0442\u044c\u044e NAND. \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u043f\u0430\u043c\u044f\u0442\u044c \u043f\u0435\u0440\u0435\u0445\u043e\u0434\u0438\u043b\u0430 \u0432 \u0440\u0435\u0436\u0438\u043c read-only;\n\u0421\u043a\u0440\u044b\u0442\u043e\u0435 \u043f\u043e\u0441\u043b\u0430\u043d\u0438\u0435 \u0443\u0437\u043a\u043e\u043c\u0443 \u043a\u0440\u0443\u0433\u0443 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0435\u0439 \u0438\u0437 \u0431\u043e\u043b\u044c\u0448\u043e\u0433\u043e ISP: \u0412\u043e\u0437\u043c\u043e\u0436\u043d\u043e, \u044d\u0442\u043e \u0438\u043c\u0435\u043d\u043d\u043e \u0442\u0430, \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u0441 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 \u0432\u044b \u0441\u0442\u043e\u043b\u043a\u043d\u0443\u043b\u0438\u0441\u044c.\n*) tile - \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430, \u043f\u0440\u0438 \u043a\u043e\u0442\u043e\u0440\u043e\u0439 Ethernet \u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441\u044b \u043f\u0435\u0440\u0435\u0441\u0442\u0430\u044e\u0442 \"\u043e\u0442\u0432\u0435\u0447\u0430\u0442\u044c\";\n *) defconf - \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0430 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u044f \u043f\u043e-\u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e \u0434\u043b\u044f wAP LTE kit;\n*) snmp - \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d OID \u0434\u043b\u044f \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u0430 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u044b\u0439 CAP (\u0442\u043e\u0447\u0435\u043a \u0434\u043e\u0441\u0442\u0443\u043f\u0430) \u0434\u043b\u044f CAPsMAN;\n*) supout - \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u0430 \u0441\u0435\u043a\u0446\u0438\u044f \"partitions\" \u0432 \u0444\u0430\u0439\u043b \u0434\u043b\u044f \u0441\u0430\u0430\u043f\u043e\u0440\u0442\u0430;\n*) winbox - \u0434\u043e\u0431\u0430\u0432\u043b\u0435\u043d\u044b \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0443\u044e\u0449\u0438\u0435 \u0440\u0430\u043d\u0435\u0435 \u043f\u043e\u043b\u044f \"dscp\" \u0438 \"clamp-tcp-mss\" \u0432 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 IPv6 \u0442\u0443\u043d\u043d\u0435\u043b\u0435\u0439;\n\n\u041f\u043e\u043b\u043d\u044b\u0439 changelog \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 bugfix:\nhttps://mikrotik.com/download/changelogs/bugfix-release-tree\n\n\u041f\u043e\u043b\u043d\u044b\u0439 changelog \u0434\u043b\u044f \u0432\u0435\u0442\u043a\u0438 current:\nhttps://mikrotik.com/download/changelogs/current-release-tree", "creation_timestamp": "2018-10-23T21:02:39.000000Z"}, {"uuid": "c5253d07-78e3-48c3-a56f-664acfa53d19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-1156", "type": "seen", "source": "Telegram/K1kytRE3tO6i-cocSTgl6hfxc8yOJuObynPNKcSMcITQVg0", "content": "", "creation_timestamp": "2018-11-01T16:03:49.000000Z"}, {"uuid": "99d30831-376d-4f2a-bcb0-064c2bb02ddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-11564", "type": "published-proof-of-concept", "source": "https://t.me/arpsyndicate/4876", "content": "#ExploitObserverAlert\n\nCVE-2018-11564\n\nDESCRIPTION: Exploit Observer has 11 entries in 4 file formats related to CVE-2018-11564. Stored XSS in YOOtheme Pagekit 1.0.13 and earlier allows a user to upload malicious code via the picture upload feature. A user with elevated privileges could upload a photo to the system in an SVG format. This file will be uploaded to the system and it will not be stripped or filtered. The user can create a link on the website pointing to \"/storage/poc.svg\" that will point to http://localhost/pagekit/storage/poc.svg. When a user comes along to click that link, it will trigger a XSS attack.\n\nFIRST-EPSS: 0.001790000\nNVD-IS: 2.7\nNVD-ES: 1.7\nARPS-PRIORITY: 0.8538082", "creation_timestamp": "2024-04-25T22:03:01.000000Z"}, {"uuid": "b8d1c856-888b-4e5f-bd9d-d37c37f566ed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-11563", "type": "seen", "source": "https://t.me/cveNotify/299", "content": "\ud83d\udea8 #CVE-2018-11563\nAn issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context o... https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-11563\n\n\ud83c\udf96@cveNotify", "creation_timestamp": "2019-07-08T15:59:52.000000Z"}, {"uuid": "932657ca-540b-49c2-8671-d005e8495409", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-11563", "type": "seen", "source": "https://t.me/cibsecurity/5385", "content": "ATENTION\u203c New - CVE-2018-11563\n\nAn issue was discovered in Open Ticket Request System (OTRS) 6.0.x through 6.0.7. A carefully constructed email could be used to inject and execute arbitrary stylesheet or JavaScript code in a logged in customer's browser in the context of the OTRS customer panel application.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-07-08T16:44:07.000000Z"}, {"uuid": "f1c2e9c8-189b-4e70-a0e2-98bcca473047", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "2a075640-a300-48a4-bb44-bc6130783b9b", "vulnerability": "CVE-2018-11569", "type": "seen", "source": "https://t.me/cibsecurity/6564", "content": "ATENTION\u203c New - CVE-2018-11569\n\nController/ListController.php in Eventum 3.5.0 is vulnerable to Deserialization of Untrusted Data. Fixed in version 3.5.2.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2019-09-05T20:39:22.000000Z"}, {"uuid": "c02dddc1-1007-4a88-9916-deab0e18190a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2018-1156", "type": "seen", "source": "https://t.me/GithubRedTeam/88597", "content": "", "creation_timestamp": "2026-07-13T22:00:43.487069Z"}, {"uuid": "ef360b20-b6ba-4601-8205-6aa8824658c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "4f29edb9-4c4b-44ca-b041-9b050656b6ae", "vulnerability": "CVE-2018-1156", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/88597", "content": "", "creation_timestamp": "2026-07-15T00:00:05.791365Z"}]}