MikroTik RouterOS 6.43.16 → 6.49.20
17 releases · 0 breaking changes · 20 security fixes · 35 advisories fixed
20security0breaking0deprecated61feature138fix
Vulnerabilities fixed by this upgrade
- 5.4 CVE-2024-54772 An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18.…
- 7.5 CVE-2023-32154 Mikrotik RouterOS RADVD Out-Of-Bounds Write Remote Code Execution Vulnerability. This vulnerability allows network-adjacent attackers to execute arbitrary code on affected installations of Mikrotik…
- 7.5 CVE-2023-30800 The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTT…
- 9.1 CVE-2023-30799 MikroTik RouterOS stable before 6.49.7 and long-term through 6.48.6 are vulnerable to a privilege escalation issue. A remote and authenticated attacker can escalate privileges from admin to super-a…
- 7.5 CVE-2020-20021 An issue discovered in MikroTik Router v6.46.3 and earlier allows attacker to cause denial of service via misconfiguration in the SSH daemon.
- 6.5 CVE-2022-36522 Mikrotik RouterOs through stable v6.48.3 was discovered to contain an assertion failure in the component /advanced-tools/nova/bin/netwatch. This vulnerability allows attackers to cause a Denial of…
- 6.5 CVE-2021-36613 Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the ptp process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dereference).
- 6.5 CVE-2021-36614 Mikrotik RouterOs before stable 6.48.2 suffers from a memory corruption vulnerability in the tr069-client process. An authenticated remote attacker can cause a Denial of Service (NULL pointer deref…
- 6.5 CVE-2020-20221 Mikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial o…
- 6.5 CVE-2020-20262 Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /ram/pckg/security/nova/bin/ipsec process. An authenticated remote attacker can cause a Denial of…
- 6.5 CVE-2020-20249 Mikrotik RouterOs before stable 6.47 suffers from a memory corruption vulnerability in the resolver process. By sending a crafted packet, an authenticated remote attacker can cause a Denial of Serv…
- 6.5 CVE-2020-20230 Mikrotik RouterOs before stable 6.47 suffers from an uncontrolled resource consumption in the sshd process. An authenticated remote attacker can cause a Denial of Service due to overloading the sys…
- 6.5 CVE-2020-20252 Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL po…
- 6.5 CVE-2020-20250 Mikrotik RouterOs before stable version 6.47 suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL po…
- 6.5 CVE-2020-20217 Mikrotik RouterOs before 6.47 (stable tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/route process. An authenticated remote attacker can cause a Denial of Se…
- 6.5 CVE-2020-20225 Mikrotik RouterOs before 6.47 (stable tree) suffers from an assertion failure vulnerability in the /nova/bin/user process. An authenticated remote attacker can cause a Denial of Service due to an a…
- 6.5 CVE-2020-20264 Mikrotik RouterOs before 6.47 (stable tree) in the /ram/pckg/advanced-tools/nova/bin/netwatch process. An authenticated remote attacker can cause a Denial of Service due to a divide by zero error.
- 6.5 CVE-2020-20266 Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/dot1x process. An authenticated remote attacker can cause a Denial of Service (NULL point…
- 6.5 CVE-2020-20220 Mikrotik RouterOs prior to stable 6.47 suffers from a memory corruption vulnerability in the /nova/bin/bfd process. An authenticated remote attacker can cause a Denial of Service (NULL pointer dere…
- 6.5 CVE-2020-20253 Mikrotik RouterOs before 6.47 (stable tree) suffers from a divison by zero vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service due to a di…
- 6.5 CVE-2020-20254 Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/lcdstat process. An authenticated remote attacker can cause a Denial of Service (NULL poi…
- 6.5 CVE-2020-20265 Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /ram/pckg/wireless/nova/bin/wireless process. An authenticated remote attacker can cause a Denial o…
- 6.5 CVE-2020-20267 Mikrotik RouterOs before 6.47 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/resolver process. An authenticated remote attacker can cause a Denial of Service due to i…
- 6.5 CVE-2020-20247 Mikrotik RouterOs before 6.46.5 (stable tree) suffers from a memory corruption vulnerability in the /nova/bin/traceroute process. An authenticated remote attacker can cause a Denial of Service due…
- 7.5 CVE-2019-16160 An integer underflow in the SMB server of MikroTik RouterOS before 6.45.5 allows remote unauthenticated attackers to crash the service.
- 7.5 CVE-2020-11881 An array index error in MikroTik RouterOS 6.41.3 through 6.46.5, and 7.x through 7.0 Beta5, allows an unauthenticated remote attacker to crash the SMB server via modified setup-request packets, aka…
- 7.5 CVE-2020-10364 The SSH daemon on MikroTik routers through v6.44.3 could allow remote attackers to generate CPU activity, trigger refusal of new authorized connections, and cause a reboot via connect and write sys…
- 8.8 CVE-2019-3976 RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below are vulnerable to an arbitrary directory creation vulnerability via the upgrade package's name field. If an authenticated user installs…
- 7.5 CVE-2019-3977 RouterOS 6.45.6 Stable, RouterOS 6.44.5 Long-term, and below insufficiently validate where upgrade packages are download from when using the autoupgrade feature. Therefore, a remote attacker can tr…
- 7.5 CVE-2019-3978 RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below allow remote unauthenticated attackers to trigger DNS queries via port 8291. The queries are sent from the router to a server of the att…
- 7.5 CVE-2019-3979 RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below are vulnerable to a DNS unrelated data attack. The router adds all A records to its DNS cache even when the records are unrelated to the…
- 6.5 CVE-2019-15055 MikroTik RouterOS through 6.44.5 and 6.45.x through 6.45.3 improperly handles the disk name, which allows authenticated users to delete arbitrary files. Attackers can exploit this vulnerability to…
- 6.5 CVE-2019-13954 Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to memory exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server and in som…
- 6.5 CVE-2019-13955 Mikrotik RouterOS before 6.44.5 (long-term release tree) is vulnerable to stack exhaustion. By sending a crafted HTTP request, an authenticated remote attacker can crash the HTTP server via recursi…
- 7.5 CVE-2019-13074 A vulnerability in the FTP daemon on MikroTik routers through 6.44.3 could allow remote attackers to exhaust all available memory, causing the device to reboot because of uncontrolled resource mana…
Breaking changes
None in the release notes.
Security changes
- security security - allow only "http:" and "https:" schemas in relevant dst fields in 6.49.19
- security Fixes CVE-2024-54772: An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18.… in 6.49.18
- security Fixes CVE-2023-30800: The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTT… in 6.49.10
- security !) ipv6 - fixed DNS server processing by IPv6/ND services (CVE-2023-32154) in 6.49.8
- security firewall - fixed IRC NAT helper (CVE-2022-2663) in 6.49.8
- security !) ipv6 - fixed DNS server processing by IPv6/ND services (CVE-2023-32154) in 6.48.7
- security firewall - fixed IRC NAT helper (CVE-2022-2663) in 6.48.7
- security MAJOR CHANGES IN v6.47.10: ---------------------- !) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147); ---------------------- in 6.47.10
- security hotspot - fixed special character parsing in "target" variable (CVE-2021-3014) in 6.47.9
- security smb - fixed possible memory leak (CVE-2020-11881) in 6.46.7
- security wireless - fixed potential wireless driver issue related to CVE-2020-3702 in 6.46.7
- security winbox - made "none" the default value for "Security Profile" parameter when creating a new "Wirelees->Connect list" entry in 6.45.9
- security security - fixed vulnerability for routers with default password (limited to Wireless Wire), admin could login on startup with empty password before default configuration script was fully loaded in 6.45.8
- security Fixes CVE-2020-20221: Mikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial o… in 6.44.6
- security MAJOR CHANGES IN v6.44.6: ---------------------- !) package - accept only packages with original filenames (CVE-2019-3976); !) package - improved package signature verification (CVE-2019-3977); !) security - fixed improper handling of DNS responses (CVE-2019-3978, CVE-2019-3979);… in 6.44.6
- security system - accept only valid string for "name" parameter in "disk" menu (CVE-2019-15055) in 6.44.6
- security MAJOR CHANGES IN v6.44.5: ---------------------- !) security - fixed vulnerabilities CVE-2019-13954, CVE-2019-13955; !) security - fixed vulnerabilities CVE-2019-11477, CVE-2019-11478, CVE-2019-11479; !) security - fixed vulnerability CVE-2019-13074; ---------------------- in 6.44.5
- security conntrack - fixed GRE protocol packet connection-state matching (CVE-2014-8160) in 6.44.5
- security ovpn - added "verify-server-certificate" parameter for OVPN client (CVE-2018-10066) in 6.44.5
- security www - improved client-initiated renegotiation within the SSL and TLS protocols (CVE-2011-1473) in 6.44.5
Every release in between
otherconsole - updated copyright notice
otherethernet - improved system stability for RB912, RB911 devices
fixmac-server - fixed configuration change for "interface-list" property
otherrouterboard - do not show "upgrade-firmware" if available installation is older than minimal supported one
otherconsole - updated copyright notice
featurelte - added support for R11e-LTE6 v039 firmware release
securitysecurity - allow only "http:" and "https:" schemas in relevant dst fields
fixsystem - fixed v6 to v7 upgrade from separate packages
othersystem - improved upgrade procedure reliability
otherupgrade - the upgrade, testing, and development channels now direct to the latest long-term version of RouterOS v7
securityFixes CVE-2024-54772: An issue was discovered in the Winbox service of MikroTik RouterOS long-term release v6.43.13 through v6.49.13 and stable v6.43 through v7.17.2. A patch is available in the stable release v6.49.18.…
otherconsole - updated copyright notice
otherfetch - improved system stability when using TFTP
otherhotspot - properly escape all reserved URI characters
featureradius - added "require-message-auth" option that requires "Message-Authenticator" in received Access-Accept/Challenge/Reject messages
otherradius - include "Message-Authenticator" in any RADIUS communication messages besides accounting for all services
featuresystem - added "shutdown" parameter for reset-configuration (CLI only)
fixsystem - fixed false log message about successful package installation
fixsystem - fixed v6 to v7 upgrade from separate packages
othersystem - improved system stability
othersystem - set flash-boot mode as "boot-device" after system reset initiated by reset button ("/system routerboard upgrade" required)
othersystem - set flash-boot mode as "boot-device" after system reset initiated from software
otheruser - improved authentication procedure when RADIUS is not used
featurewireless - allow to set Canada2 country profile when locked with US lock package for CubeG device
fixwireless - fixed antenna gain for SXT5ac device
fixdefconf - fixed firewall rule for IPv6 UDP traceroute
securityFixes CVE-2023-30800: The web server used by MikroTik RouterOS version 6 is affected by a heap memory corruption issue. A remote and unauthenticated attacker can corrupt the server's heap memory by sending a crafted HTT…
otherwww - improved service stability when receiving malformed packets
security!) ipv6 - fixed DNS server processing by IPv6/ND services (CVE-2023-32154)
otherconsole - updated copyright notice
fixdefconf - fixed invalid default password setting after configuration reset for 60GHz interface (introduced in v6.49.5)
securityfirewall - fixed IRC NAT helper (CVE-2022-2663)
otherhotspot - improved stability when receiving bogus packets
fixsmb - fixed SMB2 file list reporting
security!) ipv6 - fixed DNS server processing by IPv6/ND services (CVE-2023-32154)
othercapsman - improved stability when running background scan on CAP
otherconsole - updated copyright notice
securityfirewall - fixed IRC NAT helper (CVE-2022-2663)
otherhotspot - improved stability when receiving bogus packets
fixsmb - fixed SMB2 file list reporting
fixsnmp - fixed IPsec-SA byte and packet counter reporting
othercertificate - improved stability when sending bogus SCEP message
otherquickset - use 5GHz interface's country for "Home AP Dual" configuration
othersystem - improved system stability if device is upgraded from RouterOS and/or RouterBOOT v6.41.4 or older
featureupgrade - added new "upgrade" channel for upgrades between major versions
featurewinbox - do not allow to add/remove W60G interfaces
featurewireless - added U-NII-2 support for US and Canada country profiles for cAP ac XL and QRT 5 ac
featurebranding - properly clean up old branding files before installing a new one
fixcrs3xx - fixed default MAC address calculation on management Ethernet for CRS312, CRS326-24S+2Q+ and CRS354 devices
othergps - improved interface monitoring
otherhealth - improved temperature reporting
otherike2 - check if TS is still valid after obtaining SPI
otheripsec - improved SA update by SPI
othernetinstall - require Netinstall version to be the same or newer as "factory-software"
otherpoe - update PoE firmware only on devices that supports it
otherppp - improved stability when receiving bogus response on modem channel
otherqsfp - improved system stability when setting unsupported link rates
featuresfp - added "sfp-rate-select" setting (CLI only)
othersfp - improved SFP, SFP+, SFP28 and QSFP+ interface stability for CRS3xx and CCR2004 devices
othersfp28 - changed FEC auto mode to disabled
otherw60g - limit power output when using region EU to match EN302567 on nRAY
otherw60g - use EU region by default
featurewinbox - added "name" and "file-name" parameter when importing and exporting certificates
featurewinbox - allow setting MCS (24-31) to 4x4 Wireless interfaces
featurewinbox - do not allow to set empty "init-string" field under "System/GPS" menu
otherwinbox - do not show "GPS antenna" selection for devices without selection support
otherwinbox - show "System/Health/Settings" only on boards that have configurable values
otherwinbox - show "current-channel" column by default for CAP interfaces
featurewireless - added U-NII-2 support for US and Canada country profiles for hAP ac lite
securityMAJOR CHANGES IN v6.47.10: ---------------------- !) wireless - fixed all affecting 'FragAttacks' vulnerabilities (CVE-2020-24587, CVE-2020-24588, CVE-2020-26144, CVE-2020-26146, CVE-2020-26147); ----------------------
otherbonding - improved system stability when disabling/enabling bonding ports
featurebranding - added option to upload custom files (newly generated branding package required)
othercapsman - use proper units for "ap-tx-limit" and "client-tx-limit" parameters
otherconsole - do not clear environment values if any global variable is set
otherconsole - require "write+ftp" permissions for exporting configuration to file
otherconsole - updated copyright notice
featurecrs3xx - added "/system swos" menu for CRS354 devices, should only be used after SwOS 2.13 release
fixcrs3xx - fixed interface LEDs for QSFP+ and SFP+ interfaces on CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices
othercrs3xx - improved 1Gbps Ethernet port group traffic forwarding for CRS354 devices
othercrs3xx - improved system stability when receiving large frames on CPU for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices
fixdefconf - fixed default configuration loading on LHG R
fixdefconf - fixed default configuration loading on RBOmniTikPG-5HacD
fixdhcp - fixed link state checking for DHCP client
fixdude - fixed configuration menu presence on ARM64 devices
otherethernet - improved system stability when receiving large VLAN tagged packets on IPQ4018/IPQ4019 devices
fixipsec - fixed SA address parameter exporting
fixlte - fixed "earfcn" to band translation for "cell-monitor"
fixovpn - fixed route cache entry leak when establishing a new session
otherpoe - do not perform PoE firmware upgrade procedure on RB960 and OmniTik devices without PoE out
otherppp - do not fail "at-chat" command when issued on disabled PPP interface
otherptp - improved management service stability when receiving bogus packets
otherquickset - prefer 5GHz interface for WiFi scan in CPE mode
fixrb4011 - fixed SFP+ port MTU setting after link state change
otherrb4011 - improved SFP+ port stability after boot-up
otherroute - improved stability when connected route is modified
othersfp - improved cable length monitoring as defined per SFF-8472 and SFF-8636
fixsupout - fixed "topic" column presence in "Log" section
otherswitch - improved system stability with 98PX1012 switch chip for CCR2004-1G-12S+2XS device
othersystem - improved resource allocation (improves several service stability e.g. HTTPS, PPPoE, VPN)
othertelnet - do not send options if connecting to non standard port
fixtelnet - fixed server when run on non standard port
fixtile - fixed bridge performance degradation (introduced in v6.47)
featurewebfig - allow to specify "prefix" parameter under "IPv6/ND/Prefixes" menu
fixwinbox - fixed "reachable-time" value unit under "IPv6/ND" menu
fixwinbox - fixed QCA-8511 switch chip type reporting under "Switch/Settings" menu
fixwinbox - fixed health reporting on RB960, hEX and hEX S devices
featurewinbox - hide "Allow Roaming" parameter on LTE modems that do not support it
fixwireless - fixed issue with multicast traffic delivery to client devices using power-save
featurewww - added "X-Frame-Options" header information to disallow website embedding in other pages
+12 more items in the release notesfixbgp - fixed VPNV4 RD byte order
fixbranding - fixed LCD logo loading from new style branding package
fixcrs312 - fixed missing SwOS firmware on revision 2 devices
othercrs3xx - correctly filter packets by L2MTU size
fixcrs3xx - improved system stability when receiving large frames for CRS317, CRS309, CRS312, CRS326-24S+2Q+ and CRS354 devices (introduced in v6.47.5)
fixdefconf - fixed default configuration loading on RBcAP-2nD and RBwAP-2nD
fixhotspot - fixed "idle-timeout" usage with RADIUS authentication
securityhotspot - fixed special character parsing in "target" variable (CVE-2021-3014)
otherpackage - do not include multiple The Dude packages in HDD installer
fixsnmp - fixed "send-trap" functionality
fixwebfig - fixed new interface addition
fixwinbox - fixed enable/disable button presence for "Bridge/Hosts" menu
otherwinbox - renamed IP protocol 41 to "ipv6-encap"
otherwinbox - show "System/Health" only on boards that have health monitoring
otherwinbox - use health values reported by gauges for "System/Health" menu
otherwireless - renamed "macedonia" regulatory domain information to "north macedonia"
otherwireless - updated "indonesia5" regulatory domain information
fixcap - fixed L2MTU path discovery
fixchr - fixed file system quiescing
fixcrs3xx - fixed IGMP snooping for CRS312, CRS326-24S+2Q+ and CRS354 devices
fixcrs3xx - fixed switch rules for CRS309 and CRS317 devices (introduced in v6.46.7)
othercrs3xx - improved system stability on CRS354 devices
fixdefconf - fixed default configuration loading on RBmAP-2nD
otherdefconf - improved default configuration generation on devices with changed wireless interface names
otherdhcpv6-server - improved stability when changing server for static bindings
otherdhcpv6-server - properly save bindings when executing "make-static" command
fixfetch - fixed "src-address" usage for SFTP
otherfetch - improved SSL handshake processing
otherhotspot - do not verify Hotspot interface status when detecting if HTTP/HTTPS login method is allowed
fixleds - fixed LED type setting
fixlte - fixed multiple APN passthrough on R11e-4G
otherlte - limit allowed APN count to 3 on R11e-LTE
fixmpls - fixed duplicate "LabelRelease" message sending
otherospf - optimized LSA printing for smaller message sizes
fixpoe - fixed automatic PoE firmware upgrade procedure
otherpoe - improved PoE-out status detection
featureppp - allow specifying pool name for "remote-ipv6-prefix-pool" parameter
featureradius - added "Service-Type" attribute to Access-Request for IPv4 and IPv6 DHCP servers
othersmips - reduced RouterOS main package size
fixsms - fixed SMS sending when both "interface" and "smsc" parameters are specified
fixsnmp - fixed "/tool snmp-get" functionality (introduced in v 6.46beta43)
fixswitch - fixed Ethernet padding for small packets
otheruser - improved WinBox and The Dude authenticated session handling
otheruser-manager - updated PayPal's root certificate authorities
othervrrp - made "password" parameter sensitive
otherw60g - general stability and performance improvements
featurewireless - added support for US FCC UNII-2 and Canada country profiles for NetMetal series devices
fixwireless - fixed incorrect wireless capability information in association response frames
otherwireless - updated "kazakhstan" regulatory domain information
fixbridge - fixed host table update on SNMP query
fixbridge - fixed STP alternate and backup port states for devices with switch chip
fixcrs3xx - fixed hardware offloaded MPLS forwarding when using bonding interfaces
fixcrs3xx - fixed QSFP+ interface LEDs when using break-out cable for CRS326-24S+2Q+
fixcrs3xx - fixed switch ACL rules for CRS312, CRS326-24S+2Q+ and CRS354 devices
fixcrs3xx - fixed switch port "egress-rate" removal for CRS305, CRS326-24G-2S+, CRS328, CRS318 devices
fixdefconf - fixed default configuration loading on RBmAPL-2nD
fixdot1x - fixed duplicate EAP request packets for server
fixdot1x - fixed EAP packet version numbering
featureemail - added support for multiple "to" recipients
fixexport - fixed HotSpot "address-per-mac" parameter export
fixftp - fixed possible buffer overflow
fixike2 - fixed local side NAT detection
fixike2 - fixed policy reference for pending acquire
featureinterface - added new builtin "static" interface list
fixkidcontrol - fixed "time-unlimited-rate" to engage in correct time
fixlte - fixed modem initialization when multiple modems are used simultaneously
fixlte - fixed PDP authentication configuration for SIM7600
fixmetarouter - fixed image importing (introduced in v6.46)
fixospf - fixed disappearing NSSA default route
fixospf - fixed processing of "unknown" LSA type
fixpoe - fixed "power-cycle" functionality on hEX PoE, PowerBox Pro and OmniTIK 5 PoE ac
featureprofile - added support for CCR2004-1G-12S+2XS
fixqsfp - fixed auto-negotiation status
fixquickset - fixed invalid configuration applying when performing changes during LTE modem initialization process
fixrouterboard - fixed "reset-button" menu presence on all devices
fixrouterboot - fixed etherboot FCS errors with 100Mbps rate for CRS305, CRS309 and CRS317 devices ("/system routerboard upgrade" required)
fixsmb - fixed file path validation (introduced in v6.46)
securitysmb - fixed possible memory leak (CVE-2020-11881)
featuresniffer - allow setting port for "streaming-server"
featuresnmp - added "dot1qTpFdbTable" OID reporting for Q-BRIDGE-MIB
featurew60g - added "mdmg-fix" parameter for RBwAP60Gx3 (CLI only)
featurewinbox - added "region" parameter for W60G interfaces
featurewinbox - allow to specify any Ethernet like interface under "Tool/WoL" menu
featurewinbox - do not allow to enter empty strings in "caps-man-names" and "common-name" parameters
featurewireless - added support for U-NII-2 for cAP ac
featurewireless - added support for U-NII-2 for wAP ac
featurewireless - allow setting "tx-power" up to 40
securitywireless - fixed potential wireless driver issue related to CVE-2020-3702
featurewww - added "tls-version" parameter in "IP->Services" menu
+37 more items in the release notesotherarm - improved watchdog and kernel panic reporting in log after reboots on RB3011 and IPQ4018/IPQ4019 devices ("/system routerboard upgrade" required)
fixcapsman - fixed "certificate" parameter updating on CAP
fixcertificate - fixed certificate verification when flushing CRL's
featurechr - added support for file system quiescing
featurechr - enabled support for VMBus protocol version 4.1
otherchr - improved system stability when running CHR on Hyper-V
otherconsole - prevent incorrect type interfaces appearing in command hints
fixcrs3xx - fixed frame forwarding after disabling/enabling bridge hardware offloading for CRS354-48G-4S+2Q+ device
fixcrs3xx - fixed interface statistics for CRS354-48G-4S+2Q+ and CRS354-48P-4S+2Q+ devices
fixcrs3xx - fixed switch rule "dst-port" parameter for IPv6 traffic on CRS305-1G-4S+, CRS326-24G-2S+, CRS328-24P-4S+, CRS328-4C-20S-4S+, netPower 15FR devices
featuredefconf - added welcome note with common first steps for new users
fixhealth - fixed maximum SFP temperature reading under '/system health' menu
fixhotspot - fixed redirect to log in page (introduced in v6.45)
featureled - added "dark-mode" functionality for CRS105-5S-FB
featurelte - added "phy-cellid" value support for LTE-US
fixlte - fixed IP type selection from APN on RBSXTLTE3-7
fixsniffer - fixed minor typo in "host" menu
fixsnmp - fixed "ifSpeed" reporting for tunnel interfaces
fixsnmp - fixed "routeros-version" value returning from registration table
fixsnmp - fixed UPS battery voltage value scaling
featuressh - added support for RSA keys with SHA256 hash (RFC8332)
fixsystem - improved system stability when forwarding traffic from switch chip to CPU (introduced in v6.43)
featurewebfig - added default configuration confirmation window to WebFig
featurewebfig - allow skin designing without "ftp" and "sensitive" policies
featurewinbox - added "Options" parameter support for DHCPv6 client and server
featurewinbox - added 160Mhz extension channel support for CAPsMAN
featurewinbox - added support for "Tools->WoL" menu
fixwinbox - fixed "ARP" parameter inheritance from "CAPs Configuration" configuration
fixwinbox - fixed "Bands" parameter display for LTE interfaces
fixwinbox - fixed "DSCP" parameter value setting
fixwinbox - fixed "Frequency" and "Secondary Frequency" parameter inheritance from "CAPs Channel" configuration
fixwinbox - fixed "Passthr. MAC Address" parameter display "LTE APNs" menu
fixwinbox - fixed "Switch" menu on CRS354-48P-4S+2Q+
fixwinbox - fixed "dst-port" unsetting in "IP->Hotspot->Walled Garden" menu
fixwinbox - fixed "invalid" flag presence under "System/Certificates/CRL" menu
fixwinbox - fixed automatic "IPv6->Firewall->Address List" table update
securitywinbox - made "none" the default value for "Security Profile" parameter when creating a new "Wirelees->Connect list" entry
featurewireless - added "skip-dfs-channels" parameter
featurewireless - allow using FCC "U-NII-2" frequency range for hAP ac2 and RBwAPGR series devices
fixwireless - fixed default "antenna-gain" setting on SXT 2 devices
+20 more items in the release notesfixcapsman - fixed background scan showing incorrect regulatory domain mismatch error (CAP upgrade required)
othercapsman - improved radar detection algorithm
otherchr - improved stability when changing ARP modes on e1000 type adapters
fixconsole - fixed "clear-history" restoring historic actions after power cycle
otherconsole - removed "edit" and "set" actions from "System/History" menu
otherconsole - updated copyright notice
othercrs305 - disable optical SFP/SFP+ module Tx power after disabling SFP+ interface
otherdhcpv4-server - improved stability when RADIUS interim update is sent
fixdhcpv6-client - fixed timeout when doing rebind
otherdhcpv6-client - properly update bind time when unused prefix received from the server
otherdhcpv6-client - properly update IPv6 address on rebind
fixdhcpv6-server - fixed logged error message when using "address-pool=static-only"
otherdhcpv6-server - ignore prefix-hint from client's DHCPDISCOVER if static prefix received from RADIUS
fixhealth - fixed health reporting on OmniTIK 5 PoE ac
otheripsec - improved system stability when processing decrypted packet on unregistered interface
otherl2tp - improved system stability when disconnecting many clients at once
fixled - fixed default LED configuration for RBLHG-2nD and RBLHG-5HPnD
otherlte - show SIM error when no card is present
fixppp - fixed connection establishment when receiving "0.0.0.0" DNS
fixppp - fixed minor typo in "ppp-client" monitor
otherppp - prioritize "remote-ipv6-prefix-pool" from PPP secret over PPP profile
otherqsfp - do not report bogus monitoring readouts on modules without DDMI support
otherqsfp - improved module monitoring readouts for DAC and break-out cables
featurerouterboard - added "mode-button" support for RBcAP2nD
securitysecurity - fixed vulnerability for routers with default password (limited to Wireless Wire), admin could login on startup with empty password before default configuration script was fully loaded
fixssh - fixed output printing when "command" parameter used
othertimezone - updated time zone database to version 2019c
othertraffic-generator - improved memory handling on CHR
fixw60g - fixed "monitor" command on disabled interfaces
featurewinbox - automatically refresh "Packets" table when new packets are captured by "Tools/Packet Sniffer"
otherwinbox - show "LCD" menu only on boards that have LCD screen
featurewireless - added "ETSI" regulatory domain information
featurewireless - added "indonesia4" regulatory domain information
featurewireless - added U-NII-2 support forRBSXTsqG-5acD, RBLHGG-5acD-XL, RBLHGG-5acD, RBLDFG-5acD, RBDiscG-5acD
featurewireless - allow using "canada2" regulatory domain on US lock devices
fixwireless - fixed sensor MAC address reporting in TZSP header
otherwireless - improved compatibility by adding default installation mode and antenna gain for devices with integrated antennas
otherwireless - improved compatibility for Switzerland wireless country profile to improve compliance with ETSI regulations
otherwireless - improved IPQ4019, QCA9984, QCA9888 wireless interface stability
securityFixes CVE-2020-20221: Mikrotik RouterOs before 6.44.6 (long-term tree) suffers from an uncontrolled resource consumption vulnerability in the /nova/bin/cerm process. An authenticated remote attacker can cause a Denial o…
securityMAJOR CHANGES IN v6.44.6: ---------------------- !) package - accept only packages with original filenames (CVE-2019-3976); !) package - improved package signature verification (CVE-2019-3977); !) security - fixed improper handling of DNS responses (CVE-2019-3978, CVE-2019-3979);…
fixcapsman - fixed frequency setting requiring multiple frequencies
fixcapsman - fixed newline character missing on some logging messages
otherccr - improved packet processing after overloading interface
fixcrs312 - fixed combo SFP port toggling (introduced in v6.44.5)
othercrs328 - adjust fan speed based on SFP and CPU temperature
othercrs3xx - correctly display link rate when 10/100/1000BASE-T SFP modules are used in SFP+ interfaces
fixcrs3xx - fixed management access when using switch rule "new-vlan-priority" property
fixexport - fixed "bootp-support" parameter export
otherhealth - improved fan control on CRS3xx and CCR1016-12S-1S+r2
fixike2 - fixed policy port selection for responder with natted initiator
fixike2 - fixed traffic selector address family selection when using IPv6
fixinterface - fixed missing PWR-LINE section on PL7411-2nD and PL6411-2nD (introduced v6.44)
featureipsec - allow inline "passphrase" parameter when importing keys
fixipsec - fixed minor spelling mistakes in logs
fixled - fixed default LED configuration for RBLHG5nD
fixospf - fixed opaque LSA type checking in OSPFv2
fixospf - fixed possible busy loop condition when accessing OSPF LSAs
otherospf - improved "unknown" LSA handling in OSPFv3
featureprofile - added "internet-detect" process classificator
fixradius - fixed open socket leak when invalid packet is received (introduced in v6.44)
fixsfp - fixed "sfp-rx-power" value for some transceivers
othersmb - improved stability on x86 and CHR
fixsnmp - fixed encrypted data sequence (introduced in v6.44.5)
othersnmp - improved reliability on SNMP service packet validation
otherssh - accept remote forwarding requests with empty hostnames
fixssh - fixed carriage return presence in subsequent sessions
fixssh - improved remote forwarding handling (introduced in v6.44.3)
fixsupout - fixed supout file generation outside of internal storage with insufficient space
fixswitch - fix port isolation for non-CRS series switch chips
securitysystem - accept only valid string for "name" parameter in "disk" menu (CVE-2019-15055)
othersystem - improved system stability for devices with AR9342 SoC
fixupgrade - fixed "auto-upgrade" to use new style authentication
fixupnp - fixed XML parsing (FG-VD-19-110)
otherwatchdog - renamed "no-ping-delay" parameter to "ping-start-after-boot"
featurewinbox - added "auto-erase" parameter to "Tools/SMS" menu
featurewinbox - added "https-redirect" parameter to "IP/Hotspot/Profiles menu"
featurewinbox - added "revision" parameter to "System/Routerboard" menu
otherwinbox - removed "max-sms" parameter from "Tools/SMS" menu
+4 more items in the release notessecurityMAJOR CHANGES IN v6.44.5: ---------------------- !) security - fixed vulnerabilities CVE-2019-13954, CVE-2019-13955; !) security - fixed vulnerabilities CVE-2019-11477, CVE-2019-11478, CVE-2019-11479; !) security - fixed vulnerability CVE-2019-13074; ----------------------
otherbridge - correctly handle bridge host table
fixcapsman - fixed CAP system upgrading process for MMIPS
fixcapsman - fixed interface-list usage in access list
othercertificate - removed "set-ca-passphrase" parameter
othercloud - properly stop "time-zone-autodetect" after disable
securityconntrack - fixed GRE protocol packet connection-state matching (CVE-2014-8160)
otherdefconf - automatically set "installation" parameter for outdoor devices
fixdhcpv6-client - fixed status update when leaving "bound" state
fixdhcpv6-server - fixed dynamic IPv6 binding without proper reference to the server
otherdhcpv6-server - override prefix pool and/or DNS server settings by values received from RADIUS
fixdiscovery - fixed CDP packets not including address on slave ports (introduced in v6.44)
othere-mail - properly release e-mail sending session if the server's domain name can not be resolved
fixfirewall - fixed fragmented packet processing when only RAW firewall is configured
otherfirewall - process packets by firewall when accepted by RAW with disabled connection tracking
othergps - strip unnecessary trailing characters from "longtitude" and "latitude" values
otherhotspot - moved "title" HTML tag after "meta" tags
otheripv6 - improved system stability when receiving bogus packets
securityovpn - added "verify-server-certificate" parameter for OVPN client (CVE-2018-10066)
otherrb3011 - improved system stability when receiving bogus packets
otherrb921 - improved system stability ("/system routerboard upgrade" required)
othersnmp - improved reliability on SNMP service packet validation
fixssh - fixed non-interactive multiple command execution
featuresupout - added IPv6 ND section to supout file
featuresupout - added "pwr-line" section to supout file
othersupout - changed IPv6 pool section to output detailed print
featurewinbox - do not allow setting "dns-lookup-interval" to "0"
otherwireless - improved DFS radar detection when using non-ETSI regulated country
otherwireless - improved installation mode selection for wireless outdoor equipment
otherwireless - updated "china" regulatory domain information
securitywww - improved client-initiated renegotiation within the SSL and TLS protocols (CVE-2011-1473)