The further, the more the impression is created that the firmware of the router turns into one big hole, the hole from the ass.
And in order to somehow protect the router from attacks, you need to write 100500 rules to plug all possible holes.
Mikrotik, are you serious?

6.40.9 was hacked after 2 days after update (14 sept). Winbox port was opened for internal network and only for 1 external IP (my work). All other services were disabled. Firewall rules protected as usual. After "wrong username or password" i could reset configuration via LCD. After update...

As i've got understood, versions below 6.43 are compromised for attack. I've had to upgrade to 6.43 and total reconfig (because backup files aslo send message about wrong password, btw they were written without any password at all).

Winbox 3.18 also was tried. No results.

Did you use the same credentials that you had on the router before you upgraded to 6.40.9? Attackers were harvesting router credentials for months before the vulnerability was discovered in April of 2018. If you configured the same credentials in use prior to upgrading to 6.40.9, your credentials a...

RB3011 running 6.40.9, 2 days ago recieved "wrong username or password" in winbox. User is not "admin", password is strong enough. LCD touch was disabled. A crack - i think, than netinstall, 6.43, total reconfig (had no backups)... and today i recived the same message "wrong...

I have 2 pptp internet connections (aplus1, aplus2) and 2 internal networks (192.168.10.x, 192.168.11.x). Each pair separate from another in firewall (drop forward) and forwaded using mange connections and routes. BUT i need correct working UPNP, i mean that UPNP have to use exact external interface...