Here is an analysis of the vulnerability and the specific "interesting feature" that made it possible.

Allows an unauthenticated remote attacker to achieve Remote Code Execution (RCE) via the WAN interface. Vulnerability Type: Heap-based buffer overflow.

Security researchers from VulnCheck and the MikroTik Security Team recommend the following critical steps to secure your hardware: MikroTik · Security

: It allows an authenticated user with "admin" privileges to escalate to "super-admin" (root). While it requires a login, MikroTik routers famously shipped with a default blank password until October 2021 (RouterOS 6.49). The Impact 900,000 devices

The exploit targeted the server within MikroTik’s RouterOS.