Lucene search

[email protected]CVE-2022-36601

HistorySep 01, 2022 - 9:15 p.m.

CVE-2022-36601

2022-09-0121:15:10

[email protected]

web.nvd.nist.gov

eclipse

tcf

debug interface

vulnerability

cve-2022-36601

security issue

jasminer-x4-server

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.0%

JSON

The Eclipse TCF debug interface in JasMiner-X4-Server-20220621-090907 and below is open on port 1534. This issue allows unauthenticated attackers to gain root privileges on the affected device and access sensitive data or execute arbitrary commands.

Affected configurations

NVD

Node

jingleminingjasminer_x4_serverMatch-

AND

jingleminingjasminer_x4_server_firmwareRange≤20220621-090907

CPENameOperatorVersion
jinglemining:jasminer_x4_server_firmwarejinglemining jasminer x4 server firmwarele20220621-090907

CPE	Name	Operator	Version
jinglemining:jasminer_x4_server_firmware	jinglemining jasminer x4 server firmware	le	20220621-090907

References

jamesachambers.com/cryptocurrency-asic-miners-security-and-hacking-audit/

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

60.0%

JSON

Related for CVE-2022-36601

nvd1 cvelist1 prion1