PT-2022-16782
CVE-2022-24660
·
Published
2022-07-20
·
Updated
2022-07-27
Description by
CVSS 3.1
7.5
HighMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Goldshell ASIC Miners versions 2.2.1 and below
Description
The debug interface of Goldshell ASIC Miners was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext.
Recommendations
For Goldshell ASIC Miners versions 2.2.1 and below, update to a version above 2.2.1 to resolve the issue.
As a temporary workaround, consider restricting access to the debug interface until a patch is available.
Exploitability
Exploit
Fix
Impacts
Researchers
Vendors
Affected products
Found an issue in the description? Have something to add? Feel free to write us 👾