always your helpful self normis.
i noticed this last night, all previous emails to support hit a wall, primarly as mikrotik decided to block me from their forum , support and even at one point blocked our IP ranges remember? Just after giving me a l6 licence as reward for being a top contributor to the forum. All because i dared point out a fault with your hardware apparently. you neatly erased all history of my posts too.
So your sarcasm as usual is unwarranted and unhelpful. Some things never change over the years.
It is clear form other posts on here that this vulnerability IS known to Mikrotik and is also public knowledge.
Why mikrotik thought it a smart move to fix another vulnerability recently by making a downgrade wipe out any access security is beyond me without first taking action to make such downgrades difficult or at least 2 step, then of course widely publicising this exploit.
Now i need answers and a solution to this issue, i am less than comfortable knowing that all our edge routers have effectively been rooted with seemingly zero care for it from you.
Perhaps it is time to change the supplier of them too as we did with our wireless side after the last fiasco. Mikrotik lost ~£1M of trade from us for that decision alone.
Until you have contacted support and nobody else has, probably nothing yet. Please email support and if possible, provide full access to such a device.
As previously advised, it is always possible this exploit was installed in 6.3x versions when a known Winbox problem allowed full access to your device if Winbox port was open.