| MikroTik RouterBOARD RB951G-2HnD
|
|
Security Grade
Calculator v1
|
MikroTik RouterBOARD RB951G-2HnD
Category: Router • Model / Gen: RB951G-2HnD
Release Date: 2013-01-24 • Status: End of sale
|
Security Evaluation
1. Device Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Known hardware tampering
|
Rare
|
[1] 🔗 Proof
|
Qualitative physical-exposure judgment: researchers tested exact RB951G2HnD local jailbreak/password recovery requiring cable replug; OEM reset/Netinstall. Not criminal-tamper prevalence; no RS232 claim.
|
| Known vulnerabilities
|
Rare
|
🔗 Proof
|
Qualitative historical flaw judgment, not incidence: RouterOS CVE2018-14847 disclosure on stable6.29-6.42. Not patched6.42.1+; exact-model local research is a separate source, not Winbox-CVE test.
|
| Prior attacks
|
Rare
|
[2] 🔗 Proof
|
Controlled local research, not criminal infection: 2017 slides58 explicitly tested RB951G-2HnD; slides55-60 jailbreak/password recovery, physical cable access required. Not exact VPNFilter victim attribution.
|
| Updatability
|
Very common
|
🔗 Proof
|
Historical cadence judgment: repeated RouterOS6 stable releases2017-18, applicable MIPSBE model. Not automatic patching, continued hardware sale or current support guarantee.
|
| Category Score
|
Score: 2 / 3
|
2. System Security
| Criterion
|
Value
|
Proof
|
Comment
|
| Authentication with other systems
|
Partial
|
[3] 🔗 Proof
|
Mixed shared RouterOS capability: SSH keys/users/host authentication; OEM unauthenticated initial HTTP and local network recovery. Partial, not all-service mandatory mutual authentication.
|
| Communications
|
No encryption
|
🔗 Proof
|
Historical LAN WebFig HTTP/www80 channel only. May2018 service listing; optional configured HTTPS/SSH alternatives exist. Not all traffic or plaintext password bytes in every handshake.
|
| Storage
|
Encrypted with obselete encryption
|
[4] 🔗 Proof
|
Legacy internal-NAND user.dat credential element only: original2017 slides53-54 and PoC show reversible MD5-derived XOR. Obsolete protection before6.43, not whole-flash encryption or current format.
|
| Category Score
|
Score: 3 / 3
|
3. User Authentication
| Criterion
|
Value
|
Proof
|
Comment
|
| Account management
|
Full
|
🔗 Proof
|
Shared RouterOS6 users/passwords, groups/policies, add/disable/delete. Contemporary2018 training corroborates. Full rubric capability, not later complexity/REST features or model test.
|
| Authentication
|
Basic
|
[5] 🔗 Proof
|
Named-user login exists; original2017 exact-model local jailbreak/password recovery crosses normal boundary with physical cable access. OEM reset/Netinstall documented; not arbitrary remote no-login access.
|
| Brute-force protection
|
Exist
|
[6] 🔗 Proof
|
Configured capability only: administrator firewall/address-list rules block repeated SSH connections, official example plus2016 training. Not default-on or all-service WebFig/Winbox lockout.
|
| Event logging
|
Access event logged
|
🔗 Proof
|
Shared RouterOS account-access log includes user/source/service; contemporary2018 logs corroborate. Not this model tested by us, guaranteed persistent retention or all tampering audited.
|
| Passwords
|
Default/Common/Easy to guess
|
🔗 Proof
|
Historical pre6.43 baseline: product-linked2019 OEM guide says no password by default and automatic HTTP login. Not mandatory post-setup change or later unique-password products.
|
| Category Score
|
Score: 2 / 3
|
Technical Specifications
| Property
|
Details
|
| Operating System & App
|
Historical RouterOS6 before6.43; local jailbreak2017, separate CVE2018 scope (Companion App: )
|
| Hardware (CPU / GPU)
|
CPU: Atheros AR9344, 600 MHz • GPU:
|
| Memory & Storage
|
Memory: 128 MB RAM • Storage: 128 MB NAND
|
| Power, Battery & Charging
|
Battery: • Power: • Charging:
|
| Display & Camera
|
Display: • Camera:
|
| Sound & Connectivity
|
Sound: • Connectivity:
|
| Physical (Dimensions & Mass)
|
Dimensions: • Mass:
|
Documentary historical assessment, NOT our hardware test. ExactRB951G-2HnD, not Ui or genericRB951. RouterOS6 before6.43: controlled2017 jailbreak/password recovery on exact model, not criminal infection, exact VPNFilter victim or testedCVE2018-14847. Physical cable access required. CVE2018 example separately stable6.29-6.42. Historical HTTP channel only; internal-NAND user.dat element only; firewall brute-force capability configured, not default. Rare/Very common are qualitative judgments, not measured rates. OEM guide2019 explicitly links exact model/default/recovery/RouterOS6; no RS232 claim. Release date2013-01-24 is official staff newsletter44 publication, not global-first mention/first shipment; community exact model thread existedJan14. Date source https://forum.mikrotik.com/t/newsletter-44/63017.json. Discontinued means end of sale, not softwareEOL. Shared RouterOS evidence not claimed as model test.
