cloud hosted router

This tag covers discussions about the MikroTik Cloud Hosted Router and related RouterOS security concerns. The primary topic is a disclosed authentication-hardening problem in the RouterOS API that lacks brute-force protections such as rate limiting, account lockout, and source-based restrictions. A CISA advisory highlights the risk to exposed management interfaces, making them susceptible to password-guessing attacks. The content focuses on the nature of the weakness, which is not a remote code execution flaw but a deficiency in password authentication defenses. Administrators using cloud hosted router deployments should be aware of this issue and consider mitigation steps, as no fix has been announced.