Russia Orders Check of MikroTik Routers Over Hacking Risk
Russian telecom operators were instructed to check MikroTik routers for security vulnerabilities in the RouterOS software, with potential risks including unauthorized access and full device control. Operators must notify users and may restrict traffic if updates are not applied within seven days.
Consensus
- Roskomnadzor instructed telecom operators to check MikroTik routers due to security vulnerabilities.
- The vulnerabilities are in the RouterOS software used on MikroTik devices.
- The issue can be resolved by updating RouterOS to a patched version.
- Operators must notify users about the vulnerability.
- If users do not update within seven days, operators may restrict traffic on certain ports.
- There are approximately 100,000 MikroTik devices in Russia.
- The Main Radiofrequency Center (GRCHC), under Roskomnadzor, issued the directive.
- The vulnerabilities allow unauthorized access, file manipulation, and full device control.
- The problem affects only certain versions and configurations of RouterOS.
Points of divergence
- Operators are required to warn subscribers about the vulnerability, and if not updated within 7 days, traffic may be limited on specific ports. — riamo
- The vulnerabilities pose a threat to critical information infrastructure, including government, energy, finance, and transport systems. — tg_astrapress
- Operators received three similar directives in one month, with the first on September 11. — vesti
- MikroTik developers released a patch in early September, and CERT Polska reported six vulnerabilities and confirmed attacks using them. — vesti
- Operators have no legal obligation to update end-user equipment. — riamo
- The GRCHC recommended monitoring potentially vulnerable devices and restricting internet access to router settings on certain ports until update. — vesti
Coverage (3 sources)
- In Russia operators instructed to check MikroTik routers due to hacking threat — РИАМО
- Roskomnadzor ordered operators to check all Latvian MikroTik routers due to hacking threat — ASTRA
- GRCTC instructed operators to check routers of Latvian company MikroTik — Вести
Key entities
- GRCC
- MikroTik
- RBC
- Roskomnadzor
- Russia
- Olga
- Photo
- Fplus
- Shchegolev
- Subordinate to the Russian Agency for Monitoring Information and Communications
More on Olga
- Photo - © Olga Volodina / Fotobank Loris. Police in the Irkutsk…
- Finland has provided asylum to a Russian family that was previously…
- Kitten Rescued from Pizzeria Roof in Moscow
More on Photo
- Man attacks girlfriend, sets apartment on fire, dies
- Simonian ends mourning for husband Keosayan
- Train engineer on the Moscow–Tolyatti train was injured due to…