Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2019-3978

40
FAUCET Score

CVE-2019-3978 is a critical vulnerability affecting MikroTik RouterOS versions 6.45.6 Stable, 6.44.5 Long-term, and below, allowing remote unauthenticated attackers to trigger DNS queries. This vulnerability has a CVSS score of 7.5 (High) due to its network-based attack vector, low complexity, and potential for DNS cache poisoning, leading to integrity impact. While not on the KEV catalog, exploit code is publicly available on ExploitDB, and it has garnered significant community discussion and media coverage, indicating active awareness and potential for exploitation.

Impacted Technologies

VendorProductVersion(s)CPE
<= 6.44.5CPE matchmatch criteria
cpe:2.3:o:mikrotik:routeros:*:*:*:*:ltr:*:*:*
<= 6.45.6CPE matchmatch criteria
cpe:2.3:o:mikrotik:routeros:*:*:*:*:-:*:*:*

CVSS Data

CVSS version used by this source: 3.1

7.5HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
Exploitability Score
3.9
Impact Score
3.6
CvssVersion
3.1

Exploit Intelligence

EPSS Score
10.27%
Probability of exploitation in next 30 days
EPSS Percentile
95.2%
Percentile rank of EPSS score among Peer Group
As of 2026-07-25
Model: v2026.06.15
ExploitDB: EDB-47566 · Oct 31, 2019
This CVE's current EPSS score of 0.1027 is in the 92nd percentile among its peer group of 51,485 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.4 GitHub mentions.

Media Mentions

The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Vendor Patches (6)

aristavendor investigatingvia llm_extracted
naturalintelligencevendor investigatingvia llm_extracted
netgearvendor investigatingvia llm_extracted
opencartvendor investigatingvia llm_extracted
payloadcmsvendor investigatingvia llm_extracted
safarivendor investigatingvia llm_extracted

Vendor Advisories (6)

netgearllm-netgear-0449dfbc051ec94fHIGH

MikroTik RouterOS Multiple Vulnerabilities

Oct 28, 2019
aristallm-arista-3e170c1c6fc80c94HIGH

MikroTik RouterOS Multiple Vulnerabilities

Oct 28, 2019
opencartllm-opencart-94d254e733d0a401HIGH

MikroTik RouterOS Multiple Vulnerabilities

Oct 28, 2019
safarillm-safari-76e7b8485ac638f3HIGH

MikroTik RouterOS Multiple Vulnerabilities

Oct 28, 2019
naturalintelligencellm-naturalintelligence-ff21ec02277749a8HIGH

MikroTik RouterOS Multiple Vulnerabilities

Oct 28, 2019
payloadcmsllm-payloadcms-8e5133e57395bba9HIGH

MikroTik RouterOS Multiple Vulnerabilities

Oct 28, 2019

References

packetstormsecurity.com / files/155036/MikroTik-RouterOS-6.45.6-DNS-Cache-Poisoning.html
Third Party Advisory
tenable.com / security/research/tra-2019-46
Third Party Advisory