CVE-2018-1000049

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API

published February 9, 2018

Patch now

High probability of exploitation

NVD has not assigned a CVSS score to this record. It sits in the 99.6th percentile for exploit probability.

CVSS
—
EPSS
77%
Percentile
99.6
In the wild
Unconfirmed
What it is

Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API. The flaw can be exploited only if the software is executed with read/write mode enabled.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.76944 · 99.6th percentile
Published
2018-02-09T23:00Z
EPSS history
Timeline
  • 24 AUG 23:21Z
    EPSS moved 58% → 77%
    epss
  • 09 FEB 23:00Z
    Nanopool Claymore Dual Miner version 7.3 and earlier contains a remote code execution vulnerability by abusing the miner API
    cvelistv5