We also have a review of the MikroTik CRS317-1G-16S+RM in the pipeline. MikroTik CRS226-24G-2S+IN Review You want one.MikroTik CRS226-24G-2S+RM Review A super switch.MikroTik hEX RB750Gr3 Router Mini-Review Basic Routing Under 3W.MikroTik CSS326-24G-2S+RM Mini Review Cheap 24x 1GbE 2x 10GbE.Here are a few of our MikroTik reviews which shows why they are popular in some segments of STH’s reader base.

Whereas an IP camera vulnerability on a 11mbps WiFi uplink can be dangerous in quantity, a 72 core router with a 10Gbps uplink (or two) can sustain a higher DDoS rate as a botnet endpoint. That practically means that if these routers are compromised, they can be used to launch DDoS attacks both from SMB network endpoints but also from data center WAN connections magnifying the pps and bandwidth capabilities of each endpoint. These routers are often connected to data center WAN uplinks. An example of that is the Cloud Core Router pictured in the cover image for this article. This is a big deal since MikroTik also makes low cost, high throughput routers that implement features like BGP for smaller service providers. Here is a link to the vulnerability and more details described by Radware. The worm has a highly efficient propagation mechanism by aggressively scanning for port 8291 in order to identify publicly available Mikrotik devices and using the password cracking capabilities to infect neighbor devices.” “Preliminary analysis suggests that the botnet is exploiting known Mikrotik vulnerabilities (HTTP, SMB) as well as password brute-forcing. These customer site installations are not always patched immediately meaning that old vulnerabilities are often present. Also, many SMB service providers install them at customer sites. These are particularly troublesome in the RouterOS scenario as many of these devices are connected to the Internet as routers.

Second, using brute force password attacks. First, scanning for known vulnerabilities that are unpatched.

The worm is targeting RouterOS devices via two primary methods after scanning for port 8291 which is primarily used by MikroTik devices. The worm infects devices and creates a Botnet of RouterOS devices. Recently, Radware showed that there is a worm impacting MikroTik RouterOS devices that appears to be spreading rapidly. MikroTik is a Latvian based maker of some interesting SMB networking solutions. At STH, we review and use a fair number of MikroTik products.

Mikrotik routeros v6 email config