1000
VMScore

CVE-2017-16930

Published: 05/12/2017 Updated: 21/12/2017
CVSS v2 Base Score: 10 | Impact Score: 10 | Exploitability Score: 10
CVSS v3 Base Score: 9.8 | Impact Score: 5.9 | Exploitability Score: 3.9
VMScore: 1000
Vector: AV:N/AC:L/Au:N/C:C/I:C/A:C

Vulnerability Summary

The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote malicious user to execute arbitrary code due to a stack-based buffer overflow in the request handler. This can be exploited via a long API request that is mishandled during logging.

Vulnerable Product Search on Vulmon Subscribe to Product

claymore dual miner project claymore dual miner 10.1

Exploits

#!/usr/bin/env python # -*- coding: UTF-8 -*- # githubcom/tintinweb # # # optional: pip install pysocks (pypipythonorg/pypi/PySocks) # # ''' API overview: # >nc -L -p 3333 {"id":0,"jsonrpc":"20","method":"miner_getstat1"} {"id":0,"jsonrpc":"20","method":"miner_file","params":["epoolstxt","<encoded>"]} {"id":0 ...