Vulnerabilities (CVE)

Filtered by vendor Claymore Dual Miner Project Subscribe
Filtered by product Claymore Dual Miner
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2018-6317 1 Claymore Dual Miner Project 1 Claymore Dual Miner 2024-02-28 6.4 MEDIUM 9.1 CRITICAL
The remote management interface in Claymore Dual Miner 10.5 and earlier is vulnerable to an unauthenticated format string vulnerability, allowing remote attackers to read memory or cause a denial of service.
CVE-2017-16929 1 Claymore Dual Miner Project 1 Claymore Dual Miner 2024-02-28 8.5 HIGH 8.1 HIGH
The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability exploited by issuing a specially crafted request, allowing a remote attacker to read/write arbitrary files. This can be exploited via ../ sequences in the pathname to miner_file or miner_getfile.
CVE-2017-16930 1 Claymore Dual Miner Project 1 Claymore Dual Miner 2024-02-28 10.0 HIGH 9.8 CRITICAL
The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due to a stack-based buffer overflow in the request handler. This can be exploited via a long API request that is mishandled during logging.