WinBox vulnerability in MikroTik RouterOS turns a low-privilege account into an administrator
An authorization flaw in MikroTik RouterOS's WinBox authentication flow allows a low-privilege account to open an admin session. The fix is in version 7.24.5.