Medium severity · published Feb 27, 2017
CVE-2017-6297
The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data…
5.9
CVSS
0.7%
EPSS
No
On KEV
Description
The L2TP Client in MikroTik RouterOS versions 6.38.3 and 6.37.4 does not enable IPsec encryption after a reboot, which allows man-in-the-middle attackers to view transmitted data unencrypted and gain access to networks on the L2TP server by monitoring the packets for the transmitted data and obtaining the L2TP secret.
CVSS vector
CVSS:3.0/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 55% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RO
Routeros · Mikrotik
6.37.4; 6.83.3 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2017-6297
CVE.org
https://www.cve.org/CVERecord?id=CVE-2017-6297
Third Party Advisory
http://www.securityfocus.com/bid/96447
Exploit
https://blog.milne.it/2017/02/24/mikrotik-routeros-security-vulnerability-l2tp-tunnel-unencrypted-cve-2017-6297/
More from Routeros
9.8
CVE-2026-86060
SSH session privilege manipulation via a crafted username in Mikrotik RouterOS
9.8
CVE-2018-7445
MikroTik RouterOS Stack-Based Buffer Overflow Vulnerability
9.1
CVE-2018-14847
MikroTik Router OS Directory Traversal Vulnerability
8.2
CVE-2026-67277
Kernel memory disclosure and denial of service in MikroTik RouterOS btest service
6.5
CVE-2026-67279
SSH Pre-Authentication Rekey State Bypass in MikroTik RouterOS