Hello,
I have a MikroTik CCR2004-16G-2S+ that I can no longer access by IP address or WebFig.
WinBox returns:
“Username or password wrong”
I'm sure that the username and password are correct. They are stored in my password manager and had worked previously.
I connected a laptop directly to the router by Ethernet and checked it in WinBox Neighbors. The router is still visible, but I cannot authenticate. I noticed the following:
- Model: CCR2004-16G-2S+
- RouterOS version now shown: 7.24.2 (stable)
- Uptime: approximately 3 days
- RouterOS version last week: 7.20.7
I did not manually run an update or reboot the router last week.
Could RouterOS have automatically updated and rebooted the device? If so, could this update cause a valid local user account to return “Username or password wrong”?
Hi,
Probably you faced this problem: Important security update
Netinstall and use your backup to restore config.
Nope, ROS doesn't have "autonomous upgrade" function, it has to be initiated manually this way or another. So, as @BartoszP already hinted, it's possible that somebody hacked your router ... and went forward to ensure exclusive access by patching the same vulnerability which allowed then to hack your router in the first place.
That version is riddled with holes: hurry up and update the other machines,
or else they’ll all meet the same fate...
On the positive front: assuming router still performs (most of) its duties, this proves that running ROS version 7.24.2 on your particular device and configuration is fine. Unless hacker also fixed any errors in your configuration prior to upgrading ROS 
Dont jump to conclusions.
a. do you know if the OP left the router open to the internet on the input chain?
b. relied on ssh for external access???
Too many clues...
Yes, but why do folks NOT come here and state their truth.....
I'm a complete moron, and I left my router wide open to the internet and it appears I got hacked, what should I do??
Instead it seems, they blame the router.............. for no reason my router X doesnt accept my password.
Solution:
Netinstall + restore backup, not binary but text one
Netinstall + configuration from "zero".
Ah, now I see your point,
the title is misleading
Thanks, guys. I just did a Netinstall and restored the config. I’m new here, and this router was set up by the vendor. I’ll go through the configuration again and check whether anything is being exposed to the WAN.
That probably comes with no configuration, first thing you should set the default firewall see Rule #8 here and given links:
The twelve Rules of Mikrotik Club