CVE-2022-24659

CVE-2022-24659 affects Goldshell ASIC Miners 2.2.1 and earlier. The issue is a path traversal vulnerability that allows unauthenticated attackers to retrieve arbitrary files from the device. The NVD entry documents a NETWORK attack vector with LOW attack complexity and no privileges or user inter...

CVE-2022-24659

Goldshell ASIC Miners v2.2.1 and below was discovered to contain a path traversal vulnerability which allows unauthenticated attackers to retrieve arbitrary files from the device...

CVE-2022-24657

Goldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow attackers to remotely connect via the SSH protocol port 22...

CVE-2022-24657

CVE-2022-24657 affects Goldshell ASIC Miners v2.1.x, where hardcoded credentials enable remote SSH access (port 22). The root cause is the presence of embedded credentials in the device firmware, as documented across multiple sources in the connected set (NVD/Red Hat/CVE listings, CNNVD). Impact ...

PT-2022-16782

Name of the Vulnerable Software and Affected Versions Goldshell ASIC Miners versions 2.2.1 and below Description The debug interface of Goldshell ASIC Miners was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in...

Goldshell ASIC Miners security vulnerabilities

Goldshell ASIC Miners is a mining host from the Chinese company Goldshell. A security vulnerability exists in Goldshell ASIC Miners v2.2.1 and below, which stems from a debugging interface that was found to be publicly exposed on a web interface, allowing an attacker to access passwords and other...

Goldshell ASIC Miners path traversal vulnerability

Goldshell ASIC Miners is a mining host from Goldshell China. A security vulnerability exists in Goldshell ASIC Miners v2.2.1 and below, which stems from the discovery of a contained path traversal vulnerability that allows an unauthenticated attacker to retrieve arbitrary files from the device...

Goldshell ASIC Miners Trust Management Vulnerability

Goldshell ASIC Miners is a mining host from Goldshell China. A security vulnerability exists in Goldshell ASIC Miners version v2.1.x, which stems from the discovery of hard-coded credentials included that allow an attacker to connect remotely via SSH protocol port 22...

PT-2022-16779

Name of the Vulnerable Software and Affected Versions Goldshell ASIC Miners versions 2.1.x Description The issue concerns hardcoded credentials in the software, allowing attackers to remotely connect via the SSH protocol on port 22. Recommendations For Goldshell ASIC Miners versions 2.1.x, consid...

PT-2022-16780

Name of the Vulnerable Software and Affected Versions Goldshell ASIC Miners versions 2.2.1 and below Description The issue allows unauthenticated attackers to retrieve arbitrary files from the device due to a path traversal vulnerability. Recommendations For Goldshell ASIC Miners versions 2.2.1 a...

CVE-2022-24660: Cleartext Storage of Sensitive Information

The debug interface of Goldshell ASIC Miners v2.2.1 and below was discovered to be exposed publicly on the web interface, allowing attackers to access passwords and other sensitive information in plaintext...

CVE-2022-24659: Improper Limitation of a Pathname to a Restricted Directory

Goldshell ASIC Miners v2.2.1 and below was discovered to contain a path traversal vulnerability which allows unauthenticated attackers to retrieve arbitrary files from the device...

CVE-2022-24657: Use of Hard-coded Credentials

Goldshell ASIC Miners v2.1.x was discovered to contain hardcoded credentials which allow attackers to remotely connect via the SSH protocol port 22...