CVE-2017-16930

The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due to a stack-based…

published December 5, 2017

CVSS
—
EPSS
34%
Percentile
98.4
In the wild
Unconfirmed
What it is

🚨 A long API request? That's all it takes to kick off a buffer overflow in the Claymore Dual GPU miner! 🔥 Think of it like this: it's a bit like ordering a meal and piling on all the extras without the kitchen being able to handle it — the result? A chaotic spill that disrupts everything! If exploited, an attacker could execute arbitrary code, potentially taking control of the miner and wreaking havoc on your system or even hijacking it for unauthorized mining. Imagine an intruder commandeering your hardware — utterly devastating!

Put simply

Think of it like this: it's a bit like ordering a meal and piling on all the extras without the kitchen being able to handle it — the result? A chaotic spill that disrupts everything! The vulnerability stems from a stack-based buffer overflow in the request handler of the remote management interface, allowing unauthenticated access via an overly long API request that gets mishandled in the logging process.

What to do

If exploited, an attacker could execute arbitrary code, potentially taking control of the miner and wreaking havoc on your system or even hijacking it for unauthorized mining. Imagine an intruder commandeering your hardware — utterly devastating! To protect your setup, limit access to the remote management interface and update Claymore Dual GPU miner to the latest version as soon as patches are available. Consider implementing additional access controls to mitigate potential threats. 🛡️ You’ve got this! By taking these steps, you’ll keep your system secure and running smoothly! 💪😊

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.34340 · 98.4th percentile
Published
2017-12-05T09:00Z
EPSS history
Timeline
  • 22 SEP 03:14Z
    EPSS moved 34% → 20%
    epss
  • 06 SEP 03:10Z
    EPSS moved 34% → 20%
    epss
  • 30 AUG 15:40Z
    EPSS moved 20% → 34%
    epss
  • 29 AUG 04:21Z
    EPSS moved 34% → 20%
    epss
  • 05 DEC 09:00Z
    The remote management interface on the Claymore Dual GPU miner 10.1 allows an unauthenticated remote attacker to execute arbitrary code due to a stack-based…
    cvelistv5