{"id":205543,"date":"2026-09-07T09:48:11","date_gmt":"2026-09-07T09:48:11","guid":{"rendered":"https:\/\/www.europesays.com\/cz\/205543\/"},"modified":"2026-09-07T09:48:11","modified_gmt":"2026-09-07T09:48:11","slug":"ovladnuti-routeru-mikrotik-pomoci-ssh-bez-nutnosti-autentizace","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/cz\/205543\/","title":{"rendered":"Ovl\u00e1dnut\u00ed router\u016f MikroTik pomoc\u00ed SSH bez nutnosti autentizace"},"content":{"rendered":"<p>\u00dato\u010dn\u00edci napadaj\u00ed routery MikroTik s\u00a0jejich slu\u017ebou vzd\u00e1len\u00e9ho p\u0159\u00edstupu Secure Shell (SSH), kter\u00e1 je p\u0159\u00edstupn\u00e1 z\u00a0internetu, k\u00a0<a href=\"https:\/\/thehackernews.com\/2026\/09\/attackers-hijack-mikrotik-routers.html\" rel=\"nofollow noopener\" target=\"_blank\">z\u00edsk\u00e1n\u00ed pln\u00e9 spr\u00e1vcovsk\u00e9 kontroly<\/a> bez nutnosti ov\u011b\u0159en\u00ed. Varov\u00e1n\u00ed p\u0159ed \u00fatokem zve\u0159ejnila v\u00a0sobotu 5.\u00a0z\u00e1\u0159\u00ed <a href=\"https:\/\/cert.pl\/en\/posts\/2026\/09\/vulnerabilities-in-mikrotik-routeros-actively-exploited\/\" rel=\"nofollow noopener\" target=\"_blank\">polsk\u00e1 organizace CERT Polska<\/a>\u00a0a\u00a0dala mu jm\u00e9no MikroTrick.<\/p>\n<p>Byla objevena cel\u00e1 \u0159ada zranitelnost\u00ed, jejich\u017e kombinace vede k\u00a0ovl\u00e1dnut\u00ed za\u0159\u00edzen\u00ed. T\u00fdkaj\u00ed se vestav\u011bn\u00e9ho serveru i\u00a0klienta pro SSH, slu\u017eby pro testov\u00e1n\u00ed \u0161\u00ed\u0159ky p\u00e1sma, zpracov\u00e1n\u00ed certifik\u00e1t\u016f X.509\u00a0a rozhran\u00ed WebFig.<\/p>\n<p>Hlavn\u00ed probl\u00e9m spo\u010d\u00edv\u00e1 v\u00a0tom, \u017ee RouterOS \u0159\u00e1dn\u011b neov\u011b\u0159uje ve\u0159ejn\u00e9 kl\u00ed\u010de pou\u017e\u00edvan\u00e9 k\u00a0ov\u011b\u0159ov\u00e1n\u00ed p\u0159es SSH. Konkr\u00e9tn\u011b neporovn\u00e1v\u00e1 cel\u00fd ve\u0159ejn\u00fd kl\u00ed\u010d RSA p\u0159i\u0159azen\u00fd u\u017eivateli. \u00dato\u010dn\u00edk, kter\u00fd zn\u00e1 u\u017eivatelsk\u00e9 jm\u00e9no a ve\u0159ejn\u00fd kl\u00ed\u010d dan\u00e9ho u\u017eivatele, m\u016f\u017ee vytvo\u0159it jin\u00fd kl\u00ed\u010d a p\u0159ihl\u00e1sit se p\u0159es SSH, ani\u017e by vlastnil odpov\u00eddaj\u00edc\u00ed soukrom\u00fd kl\u00ed\u010d. Z\u00edskan\u00e1 opr\u00e1vn\u011bn\u00ed odpov\u00eddaj\u00ed opr\u00e1vn\u011bn\u00edm c\u00edlov\u00e9ho\u00a0\u00fa\u010dtu.<\/p>\n<p>Dal\u0161\u00ed souvisej\u00edc\u00ed probl\u00e9m pak spo\u010d\u00edv\u00e1 v\u00a0tom, \u017ee RouterOS v\u00a0r\u00e1mci mechanismu p\u0159ihl\u00e1\u0161en\u00ed p\u0159es SSH nespr\u00e1vn\u011b zpracov\u00e1v\u00e1 u\u017eivatelsk\u00e1 jm\u00e9na za\u010d\u00ednaj\u00edc\u00ed nepovolen\u00fdm znakem. Pomoc\u00ed speci\u00e1ln\u011b upraven\u00e9ho u\u017eivatelsk\u00e9ho jm\u00e9na tak m\u016f\u017ee \u00fato\u010dn\u00edk z\u00edskat vy\u0161\u0161\u00ed opr\u00e1vn\u011bn\u00ed. V\u00fdsledn\u00e1 relace pak m\u016f\u017ee dosponovat pln\u00fdmi administr\u00e1torsk\u00fdmi opr\u00e1vn\u011bn\u00edmi.<\/p>\n<p><a href=\"https:\/\/mikrotik.com\/supportsec\/september-2026-vulnerability\/\" rel=\"nofollow noopener\" target=\"_blank\">MikroTik vydal opravy<\/a> ve verz\u00edch 7.25beta3, 7.24.2, 7.23.4\u00a0a 6.49.21\u00a0a poprv\u00e9 v\u00a0historii zaslala ozn\u00e1men\u00ed na telefony u\u017eivatel\u016f, kte\u0159\u00ed maj\u00ed nainstalovanou aplikaci MikroTik. Spr\u00e1vci by m\u011bli co nejd\u0159\u00edve aktualizovat sv\u00e1 za\u0159\u00edzen\u00ed a pot\u00e9 zkontrolovat konfiguraci, zda neobsahuje nezn\u00e1m\u00e9 u\u017eivatele, skripty, \u00falohy pl\u00e1nova\u010de, proxy servery a tunely.<\/p>\n","protected":false},"excerpt":{"rendered":"\u00dato\u010dn\u00edci napadaj\u00ed routery MikroTik s\u00a0jejich slu\u017ebou vzd\u00e1len\u00e9ho p\u0159\u00edstupu Secure Shell (SSH), kter\u00e1 je p\u0159\u00edstupn\u00e1 z\u00a0internetu, k\u00a0z\u00edsk\u00e1n\u00ed pln\u00e9 spr\u00e1vcovsk\u00e9&hellip;\n","protected":false},"author":2,"featured_media":205544,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[13],"tags":[74,73,78,75,77,76],"class_list":["post-205543","post","type-post","status-publish","format-standard","has-post-thumbnail","category-veda-a-technika","tag-science","tag-science-technology","tag-technika","tag-technology","tag-veda","tag-veda-a-technika"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@cz\/117229132727633817","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/posts\/205543","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/comments?post=205543"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/posts\/205543\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/media\/205544"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/media?parent=205543"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/categories?post=205543"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/cz\/wp-json\/wp\/v2\/tags?post=205543"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}