Product
An authenticated, low-privileged user can trigger a stack-based buffer overflow in the RouterOS mtget binary via a crafted TFTP fetch request to gain persistent administrative privileges.