Unscored severity · published Nov 27, 2012
CVE-2012-6050
The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other…
–
CVSS
9.4%
EPSS
No
On KEV
Description
The winbox service in MikroTik RouterOS 5.15 and earlier allows remote attackers to cause a denial of service (CPU consumption), read the router version, and possibly have other impacts via a request to download the router's DLLs or plugins, as demonstrated by roteros.dll.
Exploitation
Is it being used?
Exploit prediction (EPSS)9.4% · higher than 95% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RO
Routeros · Mikrotik
5.15 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2012-6050
CVE.org
https://www.cve.org/CVERecord?id=CVE-2012-6050
Exploit
http://www.133tsec.com/2012/04/30/0day-ddos-mikrotik-server-side-ddos-attack/
Exploit
http://www.exploit-db.com/exploits/18817
exchange.xforce.ibmcloud.com
https://exchange.xforce.ibmcloud.com/vulnerabilities/75327
More from Routeros
9.8
CVE-2026-86060
SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
9.8
CVE-2018-7445
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
9.1
CVE-2018-14847
MikroTik Router OS Directory Traversal Vulnerability
8.2
CVE-2026-67277
Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
6.5
CVE-2026-67279
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS