The CVE-2018-14847 was responsibly disclosed and patched. However, the problem happened with routers that did not get updated. This is no different than any other unpatched software.

https://blog.mikrotik.com/security/winbox-vulnerability.html