PT-2018-9236
CVE-2018-1000049
·
Publicado
2018-02-09
·
Atualizado
2020-07-30
Descrição por
CVSS 3.1
7.5
AltaMétricasAV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions:
Nanopool Claymore Dual Miner versions prior to 7.3
Description:
The issue allows for remote code execution by exploiting the miner API. This can only be done if the software is run with read/write mode enabled.
Recommendations:
For versions prior to 7.3, consider disabling read/write mode to prevent exploitation until a fix is available. As a temporary workaround, restrict access to the miner API to minimize the risk of exploitation.
Explorabilidade
Exploit
Correção
Impactos
Pesquisadores
Fornecedores
Produtos afetados
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾