> disagreement between Mikrotik and the researchers about whether the vuln was actually disclosed in Dec It seems likely that it was not properly disclosed bec

> disagreement between Mikrotik and the researchers about whether the vuln was actually disclosed in Dec It seems likely that it was not properly disclosed because according to https://mikrotik.com/supportsec https://mikrotik.com/supportsec "you will be notified within 48 hours with acknowledgement of the issue" , but the reporter's web site states "ZDI reported the vulnerability to the vendor during Pwn2Own Toronto". According to MT, none of their staff attended that event. https://www.zerodayinitiative.com/advisories/ZDI-23-710/ https://www.zerodayinitiative.com/advisories/ZDI-23-710/