ATAQUE Firmware 3.41

RouterOS General
1

He detectado un nuevo tipo de ataque en donde editan el factory firmware poniendo una versión mas reciente que el upgrade Firmware entonces el MK no se actualiza y mientras tanto persiste la versión de Firmware vulnerable.

Se les ocurre que hacer?

Factory Firmware: 3.41
Current Firmware: 3.41
Upgrade Firmware: 3.33

2

Hola.

No entiendo muy bien el problema, el firmware actual es 6.44.1 en el caso de Long term.
Screenshot_896.png

3

Please describe your problem in English so we can help you to resolve the problem you have.

4

El problema es que no me permite actualizar la firmware ya la nueva versión es anterior a la current.

Esta falla ya la he visto en varios equipos en Uruguay pero no hay información en internet.

Hay algún modo de editar manualmente esos datos en el archivo de configuración?

5

ok,

I don’t upgrade firmware because the current firmware is most recent than the new firmware. Its information view in the option routerboard.

is possible edit this information manually?

6

Firmware version is not same as ROS version. There are no known vulnerabilities in firmware. Also you don’t have to update it if everything is running fine, it’s normal to run firmware with version different to ROS system version.

7

i need upgrade? Dont have solution?

8

If the screenshot you showed us is real, then your device is running an ancient version of Routeros … which is far bigger problem than version of firmware.

There are two pieces of software:

  1. firmware - routerboot (similar to BIOS on PCs) which initializes device and boots the other piece of software …
    Version information is shown in /system routerboard print .
    Upgrade package is part of routeros system package and gets available after routeros is upgraded.
  2. routeros (similar to OS on PCs - linux, windows, macOS) which runs all the time and performs router’s functions.
    Version information is shown in /system resource print .
    You can upgrade device using command /system package update install if the device has internet connectivity. If it doesn’t, then you can download upgrade packages from https://mikrotik.com/download , upload them to the device and restart it. If your device is running ancient ROS, it may be wise to upgrade to some intermediate version first … to ensure configuration is converted properly.