MikroTik router security hole allows DL user database with plain passwords

forum.mikrotik.com

23 pointschx7 comments

Really big fan of MikroTik's stuff but the security story has ended up being a nightmare. Rather disappointed.

You are not alone in this.

Why would you ever want to have any kind of login / API on a firewall accessible on a public interface?

And why would you call it “winbox”?

Wait until you two hear how they "encrypt" user passwords...

That's what their Admin GUI Windows app is called.

Remote branches maintenance, etc.