CVE-2020-5720

CVE-2020-5720 is a path traversal vulnerability affecting MikroTik WinBox versions prior to 3.21, allowing for the creation of arbitrary files wherever WinBox has write permissions. This medium-severity vulnerability (CVSS 5.9) can be exploited via a malicious endpoint or a man-in-the-middle attack, with high impact on integrity but no confidentiality or availability impact. While no public exploits or active exploitation have been observed, and community discussion is minimal, organizations using affected WinBox versions should update to mitigate this risk.