Exploit — Mikrotik 64710

Unauthenticated remote attackers can send specially crafted HTTP payloads targeting the open SCEP endpoint to cause memory corruption. This can lead to either a complete crash/Denial of Service (DoS) or Remote Code Execution (RCE).

This vulnerability, which is a , allows for Remote Code Execution (RCE) without authentication, posing a severe risk to network infrastructure.

: This flaw exists within the Simple Certificate Enrollment Protocol (SCEP) server implementation of RouterOS. An unauthenticated attacker targeting an exposed SCEP server can trigger a heap-based buffer overflow. mikrotik 64710 exploit

Attackers can modify the router's flash memory or firmware image, ensuring their access survives system reboots and factory resets.

Some older, misconfigured RouterOS versions exposed a management service on TCP port 64710. This was often a side effect of the MikroTik Bandwidth Test Server or misrouted API services. Scanning tools like Shodan occasionally show port 64710 open, leading some to call it "the 64710 exploit." However, that is a configuration issue, not an exploit. : This flaw exists within the Simple Certificate

If an organization cannot immediately upgrade past RouterOS 6.47.10 due to strict legacy hardware requirements, administrators must implement tight defensive controls to close off standard attack surfaces. Restrict IP Services and WinBox Access

The search results for "MikroTik 6.47.10 exploit" primarily reference , a heap-based buffer overflow vulnerability in the RouterOS SCEP (Simple Certificate Enrollment Protocol) server that could lead to remote code execution (RCE). CVE-2021-41987: Heap-Based Buffer Overflow you are already compromised

As of mid-2025, the leaked exploit code for CVE-2023-64710 is fully integrated into Metasploit and popular scanning tools like Nuclei. If your router’s firmware date is before November 2023, you are already compromised, even if you see no signs.

Several vulnerability categories heavily impacted legacy RouterOS v6 implementations: 1. Uncontrolled Resource Consumption ( /nova/bin/route )