Russia warns of potential hacking risk in MikroTik equipment

Russia’s telecommunications regulator Roskomnadzor has instructed operators to inspect MikroTik network equipment after potential vulnerabilities were identified in the Latvian company’s RouterOS software, RBC reported.

The Main Radio Frequency Centre (GRCHC), a state-owned enterprise under Roskomnadzor, sent operators notices requiring them to check MikroTik equipment and “take measures to eliminate potential vulnerabilities”. According to RBC, two telecom-market sources confirmed the authenticity of the letter, with operators beginning to receive similar notices on September 11.

The vulnerabilities described in the notice could allow attackers to bypass authentication, access confidential information, modify files and gain full control over affected devices, according to the document. The GRCHC said the issue could be addressed by updating RouterOS.

One RBC source said operators are expected to notify subscribers whose equipment may be vulnerable. If a user fails to install the update within seven days, the operator could restrict traffic through certain ports, potentially limiting internet access.

The GRCHC also recommended that operators monitor the IP addresses of subscribers using “potentially vulnerable equipment”.

Fplus estimates that around 100,000 MikroTik devices are in use in Russia. Oleg Grishchenko, president of the Rosteleset association, said some regional operators have thousands of subscribers using MikroTik equipment.

MikroTik products remain popular in Russia partly because of their perceived security, according to telecommunications industry representatives. They also noted that operators are not currently under a direct obligation to update customers’ end-user equipment.

By Tamilla Hasanova