Blog – MikroTik Value Added Distributor, MikroTik Training Centre, MikroTik Toronto, MikroTik Canada

Notice: A non well formed numeric value encountered in /home/tvoippanel/public_html/wp-content/themes/kallyas/theme-functions-override.php on line 3061

Notice: A non well formed numeric value encountered in /home/tvoippanel/public_html/wp-content/themes/kallyas/framework/zion-builder/hg-framework/inc/image-resizer/class-image-resize.php on line 218

Load-balance using PCC in MikroTik RouterOS v 6.xx

Sunday, 29 September 2019 by Hani Rahrouh

Introduction PCC “Per Connection Classifier” matcher will allow you to divide traffic into equal streams with the ability to keep packets with a specific set of options in one particular stream (you can specify this set of possibilities from src-address, src-port, dst-address, dst-port) Theory PCC takes selected fields from IP header, and with the help

Published in Blog

Audience – a router for those who value both beauty and functionality

Monday, 09 September 2019 by Hani Rahrouh

Audience is a tri-band (2.4 GHz & high + low 5 GHz) home access point with LTE support and meshing technology. The initial setup is also straightforward – download the iOS or Android MikroTik app; it will connect to the router and guide you through a quick setup process. We have two models available:

Published in Blog, MikroTik products, RouterBOARDs

Tagged under: Audience, RBD25G-5HPacQD2HPnD, RBD25GR-5HPacQD2HPnD&R11e-LTE6, WiFi + LTE model

DO NOT let the cables limit you, More Throughput over Power!

Wednesday, 10 July 2019 by Hani Rahrouh

PWR-LINE PRO PWR-LINE PRO (PL7510Gi) is a smart accessory to your existing network for places, where your signal or your cable is unable to reach. Usually, data over power-lines would be capped at 100Mbps, but with PWR-LINE PRO you can reach speed up to 600 Mbps! Plug this device directly into one of the LAN

Published in Blog, MikroTik products, RouterBOARDs

The First MikroTik product with 10G RJ45 Ethernet ports, CRS312-4C+8XG-RM

Monday, 08 July 2019 by Hani Rahrouh

CRS312-4C+8XG-RM Switch of the future: the first MikroTik product with 10G RJ45 Ethernet ports and SFP+ Remove the bottleneck from your network setup – it is time to upgrade that 1 Gigabit switch to something compelling and enjoy real speed. And it won’t cost an arm and a leg – only $599! Introducing CRS312-4C+8XG-RM –

Published in Blog, MikroTik products, RouterBOARDs

Tagged under: 10G RJ45 Ethernet ports and SFP+, CRS312-4C+8XG-RM

Netflix has identified vulnerabilities in RouterOS.

Tuesday, 02 July 2019 by Hani Rahrouh

Netflix has identified several TCP networking vulnerabilities in the Linux kernel that is used in RouterOS. -Netflix has identified several TCP networking vulnerabilities in FreeBSD and Linux kernels -MAJOR CHANGES IN v6.45.1 -Essential Changes in this release -Upcoming Training courses ========================================== Netflix has identified several TCP networking vulnerabilities in FreeBSD and Linux kernels The

Published in Blog, RouterBOARDs, RouterOS

Load-balance using PCC in MikroTik RouterOS v 6.xx

Introduction PCC “Per Connection Classifi...
Audience – a router for those who value both beauty and functionality

Audience is a tri-band (2.4 GHz & high + lo...
DO NOT let the cables limit you, More Throughput over Power!

PWR-LINE PRO PWR-LINE PRO (PL7510Gi) is a smart...
The First MikroTik product with 10G RJ45 Ethernet ports, CRS312-4C+8XG-RM

CRS312-4C+8XG-RM Switch of the future: the firs...
Netflix has identified vulnerabilities in RouterOS.

Netflix has identified several TCP networking v...

CVE-2023-30799
A new CVE has been published, which describes a policy elevation issue, where a logged in administrator with “policy” permissions (able to grant additional permissions to any user on the router), is also able to send crafted configuration commands, that are exchanged internally by the router software components and normally are rejected when sent by […]
CVE-2023-32154
On 10/05/2023 (May 10th, 2023) MikroTik received information about a new vulnerability, which is assigned the ID CVE-2023-32154. The report stated, that vendor (MikroTik) was contacted in December, but we did not find record of such communication. The original report also says, that vendor was informed in person in an event in Toronto, where MikroTik […]
Mēris botnet
In early September 2021 QRATOR labs published an article about a new wave of DDoS attacks, which are originating from a botnet involving MikroTik devices. As far as we have seen, these attacks use the same routers that were compromised in 2018, when MikroTik RouterOS had a vulnerability, that was quickly patched. There is no […]
Fragattacks
In beginning of May 2021, a security research group from Belgium published a set of vulnerabilities they call “Frag Attacks” (from Fragmentation Attack), which affect all modern security protocols of Wi-Fi. Not all the published issues affect MikroTik products, but those that were found to be potentially affecting RouterOS, have been fixed in all currently released […]
Upgraded package signatures
The RouterOS package signing procedure has been upgraded, to use new algorithms and utilize state of the art security hardware. It will also add a possibility to verify the integrity of existing installations. The new updated package signing procedure provides additional security to prevent installation of malicious software. Best security practices: Keep RouterOS updated to the […]
CVE-2019-3981
Summary Tenable has published a potential vulnerability in older RouterOS versions where an attacker can retrieve the password hash of a RouterOS username via a complex man-in-the-middle attack over port 8291. The attacker must be able to intercept a valid RouterOS user login attempt, so he must be located in the same network as the […]
DNS cache poisoning vulnerability
Tenable has identified a vulnerability in RouterOS DNS implementation. RouterOS 6.45.6 and below is vulnerable to unauthenticated remote DNS cache poisoning via Winbox. The router is impacted even when DNS is not enabled. One possible attack vector is via Winbox on port 8291 if this port is open to untrusted networks. The resolver can be […]
Package validation and upgrade vulnerability
Tenable has identified a couple of issues with RouterOS packaging and upgrade systems. The upgrade system used by RouterOS 6.45.5 and below is vulnerable to man in the middle attacks and insufficient package validation. An attacker can abuse these vulnerabilities to downgrade a router’s installed RouterOS version, possibly lock the user out of the system, […]
CVE-2019-11477, CVE-2019-11478, CVE-2019-11479
Summary Netflix has identified several TCP networking vulnerabilities in the Linux kernel that is used in RouterOS. The vulnerabilities can trigger denial of service if the RouterOS system is attacked from an insufficiently protected network interface (port). Firewall can protect against the issue. MikroTik has already applied the necessary patches: fix included in RouterOS 6.45.1 and […]
CVE-2018-19298 CVE-2018-19299 IPv6 resource exhaustion
Summary RouterOS contained several IPv6 related resource exhaustion issues, that have now been fixed, taking care of the above-mentioned CVE entries. The first issue caused the device to reboot if traffic to a lot of different destination addresses was routed. The reboot was caused by watchdog timer since the device was overloaded and stopped responding. […]