Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
10.0

MikroTik RouterOS and SwOS Send Web Management Interface in Plain Text

CVE-2025-61481 · published 1 year ago
Summary

A security issue in MikroTik RouterOS and SwOS allows an attacker on the same network to see your router's management interface, which could let them steal your login credentials and take control of your router. To fix this, update your router's software to the latest version.

Original advisory text
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the adm...
An issue in MikroTik RouterOS v.7.14.2 and SwOS v.2.18 exposes the WebFig management interface over cleartext HTTP by default, allowing an on-path attacker to execute injected JavaScript in the administrator’s browser and intercept credentials.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically
  • Gives an attacker full control
Severity
10.0 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-200Information Exposure
CWE-319Cleartext Transmission of Sensitive Information
CWE-1188Initialization of a Resource with an Insecure Default
Timeline
Published27 Oct 2025
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2025-61481 · NVD
Track software like this
Free during beta