CVE-2022-24660

CVE-2022-24660 affects Goldshell ASIC Miners (v2.2.1 and earlier). The root cause is a debug interface exposed publicly via the web interface, enabling attackers to access passwords and other sensitive information in plaintext. The CVE entry notes network attack potential with high impact to conf...

CVE-2022-24657

CVE-2022-24657 affects Goldshell ASIC Miners v2.1.x, where hardcoded credentials enable remote SSH access (port 22). The root cause is the presence of embedded credentials in the device firmware, as documented across multiple sources in the connected set (NVD/Red Hat/CVE listings, CNNVD). Impact ...

CVE-2022-24659

CVE-2022-24659 affects Goldshell ASIC Miners 2.2.1 and earlier. The issue is a path traversal vulnerability that allows unauthenticated attackers to retrieve arbitrary files from the device. The NVD entry documents a NETWORK attack vector with LOW attack complexity and no privileges or user inter...