Cert.lv warns of intensified cyberattacks on MikroTik routers, urges Exchange Server updates
Latvia's national cybersecurity center Cert.lv is calling on organizations to urgently update internet-exposed MikroTik routers and patch a serious vulnerability in Microsoft Exchange Server.
Cert.lv, Latvia's national cybersecurity center, has issued a warning about intensified cyberattacks targeting specific routers made by network equipment manufacturer MikroTik. The agency is urging organizations to immediately identify all MikroTik devices in their infrastructure that are exposed to the public internet and update them to the latest software versions appropriate for their platform.
Exchange Server vulnerability
At the same time, Cert.lv is warning about a high-severity vulnerability in Microsoft Exchange Server. The flaw stems from an authentication bypass weakness that allows attackers to reuse previously intercepted authentication credentials. Exploiting this weakness, an attacker who initially has limited access can escalate to significantly broader privileges within the system.
If successfully exploited, this could allow access to data stored on the Exchange Server — including viewing, modifying or deleting it — as well as disrupt the server's operation.
Recommended actions
Cert.lv is urging organizations to install the relevant Microsoft security update as soon as possible and to ensure their Exchange Server is updated to at least one of the following versions: Exchange Server 2016 CU23 (15.01.2507.072 or later), Exchange Server 2019 CU14 (15.02.1544.044 or later) or CU15 (15.02.1748.049 or later), and Exchange Server Subscription Edition (15.02.2562.046 or later).
Cert.lv emphasizes that timely updates are essential to prevent potential data breaches and service disruptions at organizations using the affected products.
