CVE-2020-5721

CVE-2020-5721 affects MikroTik WinBox versions 3.22 and below, where it insecurely stores user passwords in cleartext within the settings.cfg.viw configuration file if the "Keep Password" option is enabled and no Master Password is set. This vulnerability has a CVSS score of 5.5 (Medium), indicating that an attacker with local access to the configuration file can easily extract credentials, leading to unauthorized access to the router. While the potential impact is high for confidentiality, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.