4 ms·
I'd be wary about running a mikrotik as a home router, but mostly because the user interface is not what I would call friendly at all unless you're already a ne
by fencepost 9y ago
I'd be wary about running a mikrotik as a home router, but mostly because the user interface is not what I would call friendly at all unless you're already a networking person. It's not a terrible idea if you need more capability then a standard home router, but there are other options that also offer more power than home routers without quite so much visible complexity. As an example, OpenWRT on a capable router get you a more familiar command line interface and an awful lot of packages.
As far as the RCE, is SMB even enabled by default? It's an important catch and I'm not clear yet how exploitable via JS in a browser, but I can't imagine that SMB is open to the world in any router's default configuration.
- carlhjerpe 9y agoIn the home / office equipment SMB is disabled by default, and there are firewall rules blocking all incoming connections from WAN. Someone over at a MikroTik channel said "if you run SMB on your router and you've got it accessible to the world you deserve to be hacked" I can't say i disagree. The recent bug about being able to download the user database was less cool though. But it was patches very fast after it was discovered. Then again the above bug is only exploitable if you allow incoming connections from WAN on the management port, which isn't good practice (but i and many other people do it anyways because it's simple).
- fencepost 9y agoWe used to allow remote connections to management, but for probably 2-3 years it's been trusted networks only. Same for rdp, and the last customer with an in house mail server should be off it in 2-3 months. These days a blank non responsive void is the only thing that makes sense for an office.