CVE-2018-1000049

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can be exploited only if the software is executed with read/write mode enabled...

Remote code execution

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can be exploited only if the software is executed with read/write mode enabled...

CVE-2018-1000049

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can be exploited only if the software is executed with read/write mode enabled...

CVE-2018-1000049

CVE-2018-1000049 affects Nanopool Claymore Dual Miner 7.3 and earlier, via the miner’s remote management API (EthMan) that runs on a configurable port (notably 5555). The vulnerability allows remote code execution when read/write access is enabled, exposing endpoints such as miner_restart, miner_...