MikroTik RouterOS (bugfix) 6.30.1-6.40.7, (current) 6.29-6.42, (RC) 6.29rc1-6.43rc3 allows unauthenticated remote attackers to read arbitrary files through a directory traversal through the WinBox interface (typically port 8291).
To display the available options, load the module within the Metasploit console and run the commands 'show options' or 'show advanced':
msf > use auxiliary/gather/mikrotik/winbox_filereadmsf undefined(winbox_fileread) > show actions ...actions...msf undefined(winbox_fileread) > set ACTION < action-name >msf undefined(winbox_fileread) > show options ...show and set options...msf undefined(winbox_fileread) > runWith curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub