CVE-2018-10066

Name of the Vulnerable Software and Affected Versions: MikroTik RouterOS version 6.41.4

Description: An issue in MikroTik RouterOS allows a remote unauthenticated attacker to act as a malicious OpenVPN server by exploiting missing OpenVPN server certificate verification. This could enable the attacker to gain access to the client's internal network, particularly in site-to-site tunnels.

Recommendations: For MikroTik RouterOS version 6.41.4, ensure proper OpenVPN server certificate verification is implemented to prevent malicious server impersonation. Consider updating to a version where this issue is fixed, if available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.