Hacker News Reader

I recently discovered a vulnerability and jailbroke RouterOS 7.4 (beta). As far as I know, this is the latest jailbreak for RouterOS (as of today):

https://nns.ee/blog/2022/08/05/routeros-container-rce.html

View on HN

Awesome work! Also, thanks for pointing out that RouterOS supports Docker now, there's no way this is the only vuln in that implementation.

It is a feature with warning everywhere. You'll need physical access to the device to enable docker.

I think is still a very nice feature to release even if it's no complete and fully secure yet.

> your router is as secure as anything you run in container; > if you run container, there is no security guarantee of any kind; > running a 3rd party container image on your router could open a security hole/attack vector/attack surface;

https://help.mikrotik.com/docs/display/ROS/Container#Contain...

I think the key difference here is that it enabled root access to the host RouterOS, which is generally not something that RouterOS permits, enables, or allows. It's why the word "jailbreaking" can even be used in a RouterOS context - it's similar to jailbreaking iOS or rooting an Android phone, where the end-user is NOT meant to have root access to the device.

It started with Synology, I'm not sure I like the world where docker runs on anything.

Reply on news.ycombinator.com