Critical MikroTik RouterOS vulnerabilities are being actively exploited; immediate update recommended

CERT Polska identified and coordinated the disclosure of six MikroTik RouterOS vulnerabilities. Combining two of them allows an attacker to take over a device without authentication when its SSH service is accessible from public networks. CERT Polska confirmed that such attacks have occurred in recent days and that the released patches prevent the observed attacks.