Mikrotik routers

Inseek just joined Posts: 6 Joined: Sat Apr 27, 2019 6:06 pm MikroTik routers Hijacked by botnet Thu Jan 23, 2025 5:39 pm It was just brought to my attention but I am not finding a word from Mikrotik about this:thehackernews.com/2025/01/13000-mikrotik-routers-hijacked-by.htmlApparently, it is just 2 days old discovery and details are scarce. chechito Forum Guru Posts: 3261 Joined: Sun Aug 24, 2014 3:14 am Location: Bogota Colombia Contact: Re: 13,000 MikroTik routers Hijacked by botnet Thu Jan 23, 2025 5:43 pm that "news" arised since January 14 i think is mostly click-bait inseek just joined Topic Author Posts: 6 Joined: Sat Apr 27, 2019 6:06 pm Re: MikroTik routers Hijacked by botnet Thu Jan 23, 2025 5:59 pm Well, knowing that my network is "mostly" protected is not the acceptable state for me Knowing that there were multiple vulnerabilities exploited in Miktotik devices in the recent years makes me jump once I read news about new issues affecting Mikrotik...I own multiple devices from this vendor so I am obviously interested to know that these are reasonably secure and the manufacturer takes all necessary steps to avoid situations like this. jaclaz Forum Guru Posts: 2562 Joined: Tue Oct 03, 2023 4:21 pm Re: MikroTik routers Hijacked by botnet Thu Jan 23, 2025 6:08 pm Details are not scarce, they are not existing.That routers with credentials admin/blank (or admin/admin and similar) can be easily accessed (or bruteforced for simple, common passwords) is not "news", and the referenced CVE (from 2023) is founded on the same basic issue, from its description: RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-admin on the Winbox or HTTP interface. The attacker can abuse this vulnerability to execute arbitrary code on the system. (highlighting is mine)Whilst the privilege escalation was (is) only possible on 6.49.7 and earlier, the problem with user "admin" and no or easily guessable password remains if users does not change.The good Mikrotik guys started replacing admin/blank with admin/ to "force" users to better protect users setups, but nothing can be done for older devices and we have reports of routers compromised within seconds/minutes from being connected to the internet "accidentally" when not in a more secure login state, last example (jFYI):viewtopic.php?t=211182 inseek just joined Topic Author Posts: 6 Joined: Sat Apr 27, 2019 6:06 pm Re: MikroTik routers Hijacked by botnet Thu Jan 23, 2025 6:29 pm That's good, then! I keep all my devices updated/patched and not directly accessible from Internet, with default account disabled. rextended Forum Guru Posts: 12918 Joined: Tue Feb 25, 2014 12:49 pm Location: Italy Contact: Re: MikroTik routers Hijacked by botnet Thu Jan 23, 2025 6:32 pm Still falling everytime into the same stupid speeches.Are you able to understand well what is written???MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue.A remote and authenticated attacker can escalate privileges from admin to super-admin

We all know the pain of being unable to watch our favorite shows because they are not shown in our country. Even streaming services limit their shows to certain territories, and you might miss out on a great movie. Luckily there is a solution to it — using a VPN. you want to know how to set up VPN on a Mikrotik router, this article is just for you because we will explain how to set up VPN on Mikrotik Router for remote access and use it. Also, if you like to know about the best Routers Compatible with Tomato, click here.What should you know about MikroTik Routers?Benefits of Using a VPNWhat is the procedure for configuring a VPN service on a MikroTik router?Which VPN provider to choose?FAQ’sDo MikroTik devices support VPN?How can I remotely access my Mikrotik modem if I lack a static IP?Is remote monitoring possible with VPN?Is a VPN necessary for remote access?ConclusionWhat should you know about MikroTik Routers?MikroTik products are among the most popular ones people will trust for private usage. Their routers are perfect for small and more significant homes, and some IT specialists say those are the best on the market. They have an OS based on Linux, which is very powerful but easy to use.One of the coolest things about MikroTik RouterOS is that you can also use it on your PC and, in a way, turn it into a router. If you haven’t used it by now and are unsure if it will be the right fit for you, you can test it even without a license. Like, before getting a MikroTik product, you will know if the feature set will fit you, and you will be able to manage it.Benefits of Using a VPNThere are myriad advantages to using a VPN connection. It can help you with the following:Keeping your privacy — Nowadays, everyone can become a target of hackers. Yes, you might think, but I am just using the internet to browse videos and watch movies. And maybe you are, but at least once, you also have performed an online purchase and left your data somewhere. This is all a hacker would need. They can grab your personal information and credit card, and suddenly you will buy expensive electronics or BitCoins.Mask your IP location — This may be the main reason people would consider a VPN. This tool can mask your VPN and deceive any online site or streaming service about your location. As a result, you can watch whatever you want, even if it isn’t accessible in your country. But also, we know that some sites show different prices depending on your IP location, so choosing one that you know will have the cheaper options is an excellent use of a VPN.There are many other benefits of using a VPN, but let’s now check how to set up one on a MikroTik router. Since this is one of the most common router products, several VPNs you can choose from

ISP router which supports your "full cone NAT" feature.I would recommend MikroTik routers only to people who want to setup VPNs between locations, want to run different networks on the same router, etc.That is where they shine relative to standard home routers. Not for ease of use, single-checkmark configuration of advanced features, modern WiFi, etc. kcarhc Frequent Visitor Topic Author Posts: 57 Joined: Thu Feb 01, 2018 9:54 am Re: FEATURE REQUEST: full cone NAT Thu Feb 16, 2023 2:52 pm The advantage of RouterOS for me is its stability, which is the most important factor. RouterOS version 6.x is indeed very stable. As for WiFi, most people use access points such as UBNT, Linksys, or other brands of routers to operate in access point mode. However, RouterOS 7.0 is a disaster, especially on devices like hAP ac2 with a small 16MB hard disk. The total disk size is 16MB, but the available space is only 1-2MB, which can cause disk leakage and eventually become a brick.I have used MikroTik WiFi products, including all models with built-in WiFi for home use, and finally discovered the performance issue with MikroTik WiFi, which unfortunately cannot be resolved by MikroTik and the root cause has not been found. I believe that some people have encountered the same issue as me and have assumed that it was due to the poor quality of the MikroTik WiFi models. However, through testing, I found that it was not the case.You can perform a test by using a MikroTik device as an access point and connecting a RouterOS and another brand of router to it respectively, and then conduct a speed test on the speedtest.net website. You will find that the WiFi performance running on RouterOS is worse than that connected to the other brand of router, even though they are both in access point mode. In other words, there is a performance issue when exchanging data between MikroTik routers and access points.Using the same mobile phone and the same access point, but connecting to different routers, one is RouterOS and the other is another brand of router. The WiFi performance connected to the other brand of router is better than using RB4011iGS+5HacQ2HnD-IN as a WiFi router directly. kcarhc Frequent Visitor Topic Author Posts: 57 Joined: Thu Feb 01, 2018 9:54 am Re: FEATURE REQUEST: full cone NAT Thu Feb 16, 2023 3:07 pm Regarding MikroTik's AP performance issue, a friend of mine came up with a classic saying: ？"Don't connect MikroTik's AP to MikroTik's RouterOS if you don't want your AP's performance to deteriorate." Larsa Forum Guru Posts: 1775 Joined: Sat Aug 29, 2015 7:40 pm Location: The North Pole, Santa's Workshop Re: FEATURE REQUEST: full cone NAT Thu Feb 16, 2023 3:57 pm These are my conclusions after been talking to my son and his buddies: neither full-cone NAT nor DMZ is needed for normal online games and port forwarding is usually only needed if you are running a self hosted server. Depending on the