{"id":292702,"date":"2026-09-08T18:25:13","date_gmt":"2026-09-08T18:25:13","guid":{"rendered":"https:\/\/www.europesays.com\/ro\/292702\/"},"modified":"2026-09-08T18:25:13","modified_gmt":"2026-09-08T18:25:13","slug":"atentie-probleme-mari-de-securitate-pe-router-ele-mikrotik","status":"publish","type":"post","link":"https:\/\/www.europesays.com\/ro\/292702\/","title":{"rendered":"Atentie! Probleme mari de securitate pe router-ele MikroTik"},"content":{"rendered":"<p><img data-od-unknown-tag=\"\" data-od-xpath=\"\/HTML\/BODY\/DIV[@id='td-outer-wrap']\/*[2][self::DIV]\/*[2][self::DIV]\/*[1][self::DIV]\/*[1][self::ARTICLE]\/*[1][self::DIV]\/*[1][self::DIV]\/*[3][self::DIV]\/*[1][self::DIV]\/*[2][self::DIV]\/*[2][self::DIV]\/*[5][self::DIV]\/*[3][self::DIV]\/*[1][self::FIGURE]\/*[1][self::IMG]\" fetchpriority=\"high\" decoding=\"async\" width=\"1024\" height=\"636\" src=\"https:\/\/www.europesays.com\/ro\/wp-content\/uploads\/2026\/09\/mikrotik-1024x636.jpg\" alt=\"Dac\u0103 folosi\u021bi un produs MikroTik (router, webcam) \u0219i avea\u021bi cumva deschis portul SSH, sunt \u0219anse mari s\u0103 ave\u021bi probleme majore!\" class=\"wp-image-120641\"  \/>Dac\u0103 folosi\u021bi un produs MikroTik (router, webcam) \u0219i avea\u021bi cumva deschis portul SSH, sunt \u0219anse mari s\u0103 ave\u021bi probleme majore!<\/p>\n<p class=\"wp-block-paragraph\">Citeam la <a href=\"https:\/\/medium.com\/@costin.raiu\/mikrotik-ssh-0day-exploitation-in-the-wild-20da4587d9b2\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">Costin<\/a> c\u0103 produsele MikroTik ce aveau deschis portul SSH e posibil s\u0103 fie deja infectate. MikroTik este o companie din Letonia care produce o gr\u0103mad\u0103 de router-e, switch-uri, webcam-uri destul de performante, la pre\u021buri accesibile, motiv pentru care sunt foarte r\u0103sp\u00e2ndite, chiar \u0219i la noi. Numai c\u0103 zilele astea au fost descoperite ni\u0219te probleme grave de securitate ce pot fi exploatate ca s\u0103 se ob\u021bin\u0103 drepturi de root \u0219i prin urmare s\u0103 poat\u0103 fi manipulate \u00een direc\u021bii nedorite.<\/p>\n<p class=\"wp-block-paragraph\">E vorba despre mai multe probleme identificate de CERT Polska \u00een RouterOS (sistemul de operare folosit \u00een produsele MikroTik) care permit conectarea de la distan\u021b\u0103, s\u0103rind peste pasul de autentificare. MikroTik a reac\u021bionat rapid \u0219i a oferit patch-urile necesare elimin\u0103rii problemelor, ceea ce \u00eenseamn\u0103 c\u0103 dac\u0103 v\u0103 mi\u0219ca\u021bi rapid \u0219i le aplica\u021bi, poate sc\u0103pa\u021bi de probleme. Fix-urile sunt reparate \u00een  versiunile de firmware 7.25 beta 3, 7.24.2, 7.23.4 \u0219i 6.49.21, <a href=\"https:\/\/mikrotik.com\/supportsec\/september-2026-vulnerability\" target=\"_blank\" rel=\"noreferrer noopener nofollow\">cu detalii aici.<\/a><\/p>\n<p class=\"wp-block-paragraph\">MikroTik spune c\u0103 de\u0219i problemele de securitate sunt importante, majoritatea configura\u021biilor nu ar trebui s\u0103 fie afectate, pentru c\u0103 deschiderea portului SSH nu e o op\u021biune implicit\u0103.<\/p>\n<p class=\"wp-block-paragraph\">Sunt trei vulnerabilit\u0103\u021bi CVE-2026-67276 (scor CVSS de 9.2) \u2013 SSH authentication bypass bug; CVE-2026-86060 (scor CVSS de 9.2) \u2013 SSH session privilege manipulation issue \u0219i CVE-2026-67277 (scor CVSS de 8.8) \u2013 memory disclosure and denial-of-service weakness.<\/p>\n<p class=\"wp-block-paragraph\">\u00cencep\u00e2nd cu data de 2 septembrie au fost observate atacuri ce \u00eembinau aceste vulnerabilit\u0103\u021bi pentru a ob\u021bine acces neautorizat \u2013 dac\u0103 ave\u021bi activate log-urile, pute\u021bi vedea c\u0103 atacurile au venit ini\u021bial de la adresele 82.192.72.4 \u0219i 103.102.31.18, \u00een teorie ele fiind marcate ca atare.<\/p>\n<p class=\"wp-block-paragraph\">Ce trebuie s\u0103 face\u021bi voi? Merge\u021bi rapid \u0219i face\u021bi update la software-ul de pe dispozitivul MikroTik, apoi arunca\u021bi un ochi \u00een log-uri s\u0103 vede\u021bi dac\u0103 g\u0103si\u021bi a\u0219a ceva:<\/p>\n<p class=\"wp-block-paragraph\">\u00a0`login failure for user -2 from  via ssh`sau `\/system history` contains `trace=\u201dssh:-2@\u201d`.<\/p>\n<p class=\"wp-block-paragraph\">Prima \u00eenseamn\u0103 c\u0103 cineva a \u00eencercat s\u0103 se conecteze, a doua \u00eenseamn\u0103 c\u0103 a \u0219i reu\u0219it. Iar dac\u0103 s-a \u00eent\u00e2mplat asta, ar fi bine s\u0103 da\u021bi un harwdare reset \u0219i s\u0103 rescrie\u021bi firmware-ul. \u0218i s\u0103 v\u0103 uita\u021bi atent la ce chestii dubioase v-au ap\u0103rut prin re\u021bea sau pe sistemele pe care le folosi\u021bi.<\/p>\n<p class=\"wp-block-paragraph\">Sper s\u0103 nu fie cazul, de\u0219i to\u021bi cei care au scris despre subiect au spus c\u0103 dac\u0103 a\u021bi avut portul SSH deschis, \u0219ansele ca respectivul gadget s\u0103 fie compromis sunt foarte mari.<\/p>\n","protected":false},"excerpt":{"rendered":"Dac\u0103 folosi\u021bi un produs MikroTik (router, webcam) \u0219i avea\u021bi cumva deschis portul SSH, sunt \u0219anse mari s\u0103 ave\u021bi&hellip;\n","protected":false},"author":2,"featured_media":292703,"comment_status":"","ping_status":"","sticky":false,"template":"","format":"standard","meta":{"footnotes":"","_share_on_mastodon":"0"},"categories":[16],"tags":[80380,2070,41,40,38,39,264,80381,141,124],"class_list":["post-292702","post","type-post","status-publish","format-standard","has-post-thumbnail","category-tehnologie","tag-mikrotik","tag-probleme","tag-ro","tag-romana","tag-romania","tag-romanian","tag-router","tag-ssh","tag-technology","tag-tehnologie"],"share_on_mastodon":{"url":"https:\/\/pubeurope.com\/@ro\/117236828026325995","error":""},"_links":{"self":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts\/292702","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/comments?post=292702"}],"version-history":[{"count":0,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/posts\/292702\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/media\/292703"}],"wp:attachment":[{"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/media?parent=292702"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/categories?post=292702"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.europesays.com\/ro\/wp-json\/wp\/v2\/tags?post=292702"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}