CVE-2018-1000093

CryptoNote is reported to have a local RPC server (walletd/simplewallet) that does not require authentication in CryptoNote v0.8.9 and possibly later. This allows a remote attacker to issue commands to the RPC daemons, potentially leading to remote command execution and takeover of the cryptocurr...