CVE-2017-16929 The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability exploited by issuing a specially crafted request, allowing a rem...
HighCVSS 8.1
EPSS 12.9%
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
The remote management interface on the Claymore Dual GPU miner 10.1 is vulnerable to an authenticated directory traversal vulnerability exploited by issuing a specially crafted request, allowing a remote attacker to read/write arbitrary files. This can be exploited via ../ sequences in the pathname to miner_file or miner_getfile.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| claymore dual miner project claymore dual miner | = 10.1 | No fix listed |
References
- www.openwall.com mailing-list
- github.com third-party-advisory
- 43231 exploit third-party-advisory vdb-entry