: A known issue in 3.18 is the "Downloading Descriptors" error, which often occurs due to
: v3.18 followed the mandatory migration to an encrypted protocol. Earlier versions like 2.9 were highly vulnerable to critical exploits (like CVE-2018-14847 winbox old version 3.18
| Risk | Explanation | |------|-------------| | | Known CVEs affect Winbox pre-3.20, including authentication bypass flaws. A router exposed to the internet with Winbox service enabled + using 3.18 client is dangerous. | | No TLS 1.2+ | Newer routers force secure connections. Winbox 3.18 cannot negotiate strong ciphers with RouterOS 7.x. | | Feature Blind Spots | Cannot see newer features like VXLAN, WireGuard, or Container Mode. | : A known issue in 3
Winbox 3.18 uses the classic "Neighbors" discovery system. It listens for MikroTik CDP (Cisco Discovery Protocol) and MNDP (MikroTik Neighbor Discovery Protocol). The "Refresh" button actually works instantly, something that has become laggy in later builds due to added security checks. | | No TLS 1